CVE-2013-6440

16

FAUCET Score

CVE-2013-6440 describes an XML External Entity (XXE) vulnerability in Shibboleth OpenSAML-Java versions prior to 2.6.1, affecting its BasicParserPool, StaticBasicParserPool, XML Decrypter, and SAML Decrypter components. This flaw allows remote attackers to conduct XXE attacks by submitting a crafted XML DOCTYPE declaration. The vulnerability has a CVSS score of 5.0 (Medium), indicating a network-based attack with low complexity, requiring no authentication, and potentially leading to partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		2.0CPE matchmatch criteria	cpe:2.3:a:internet2:opensaml:2.0:::::::*
		2.1.0CPE matchmatch criteria	cpe:2.3:a:internet2:opensaml:2.1.0:::::::*
		2.2.0CPE matchmatch criteria	cpe:2.3:a:internet2:opensaml:2.2.0:::::::*
		<= 2.6.0CPE matchmatch criteria	cpe:2.3:a:shibboleth:opensaml::::::::
		2.4.0CPE matchmatch criteria	cpe:2.3:a:shibboleth:opensaml:2.4.0:::::::*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Exploitability Score

10.0

Impact Score

2.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

2.75%

Probability of exploitation in next 30 days

EPSS Percentile

84.7%

Percentile rank of EPSS score among Peer Group

As of 2026-07-25

Model: v2026.06.15

This CVE's current EPSS score of 0.0275 is in the 78th percentile among its peer group of 23,701 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (148)

mavenpatch availablevia ghsa

Product: org.opensaml:opensamlFixed in: 2.6.1

redhatpatch availablevia redhat_api

Product: Fuse ESB Enterprise 7.1.0

redhatpatch availablevia redhat_api

Product: Fuse Management Console 7.1.0

redhatpatch availablevia redhat_api

Product: Fuse MQ Enterprise 7.1.0

redhatpatch availablevia redhat_api

Product: Red Hat JBoss BPMS 6.0Fixed in: xmltooling

redhatpatch availablevia redhat_api

Product: Red Hat JBoss BRMS 6.0Fixed in: xmltooling

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.2

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5Fixed in: jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6Fixed in: jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: hornetq-0:2.3.14-1.Final_redhat_1.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jacorb-jboss-0:2.3.2-13.redhat_6.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-appclient-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-cli-0:7.3.1-4.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-client-all-0:7.3.1-4.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-clustering-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-cmp-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-configadmin-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-connector-0:7.3.1-4.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-controller-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-controller-client-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jbossas-core-0:7.3.1-5.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-core-security-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-deployment-repository-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-deployment-scanner-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-domain-http-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-domain-management-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-ee-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-ee-deployment-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-ejb3-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-embedded-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-host-controller-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-jacorb-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-jaxr-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-jaxrs-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-jdr-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-jmx-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-jpa-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-jsf-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-jsr77-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-logging-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-mail-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-management-client-content-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-messaging-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-modcluster-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jbossas-modules-eap-0:7.3.1-6.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-naming-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-network-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-osgi-0:7.3.1-4.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-osgi-configadmin-0:7.3.1-4.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-osgi-service-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-platform-mbean-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-pojo-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-process-controller-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-protocol-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-remoting-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-sar-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-security-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-server-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-system-jmx-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-threads-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-transactions-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-version-0:7.3.1-4.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-web-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-webservices-0:7.3.1-3.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-weld-0:7.3.1-4.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-as-xts-0:7.3.1-2.Final_redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-logmanager-0:1.5.2-1.Final_redhat_1.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-marshalling-0:1.4.3-1.Final_redhat_1.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jbossweb-0:7.3.0-1.Final_redhat_1.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: jboss-xnio-base-0:3.0.9-1.GA_redhat_1.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: netty-0:3.6.7-1.Final_redhat_1.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: picketbox-0:4.0.19-2.SP3_redhat_1.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: weld-core-0:1.1.17-1.Final_redhat_1.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: xml-security-0:1.5.6-1.redhat_1.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 5Fixed in: xmltooling-0:1.3.4-5.redhat_3.1.ep6.el5

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: hornetq-0:2.3.14-1.Final_redhat_1.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jacorb-jboss-0:2.3.2-13.redhat_6.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-appclient-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-cli-0:7.3.1-4.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-client-all-0:7.3.1-4.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-clustering-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-cmp-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-configadmin-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-connector-0:7.3.1-4.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-controller-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-controller-client-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jbossas-core-0:7.3.1-5.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-core-security-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-deployment-repository-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-deployment-scanner-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-domain-http-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-domain-management-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-ee-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-ee-deployment-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-ejb3-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-embedded-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-host-controller-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-jacorb-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-jaxr-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-jaxrs-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-jdr-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-jmx-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-jpa-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-jsf-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-jsr77-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-logging-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-mail-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-management-client-content-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-messaging-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jbossas-modules-eap-0:7.3.1-6.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-naming-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-network-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-osgi-0:7.3.1-4.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-osgi-configadmin-0:7.3.1-4.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-osgi-service-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-platform-mbean-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-pojo-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-process-controller-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-protocol-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-remoting-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-sar-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-security-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-server-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-system-jmx-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-threads-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-transactions-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-version-0:7.3.1-4.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-web-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-webservices-0:7.3.1-3.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-weld-0:7.3.1-4.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-xts-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-logmanager-0:1.5.2-1.Final_redhat_1.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-marshalling-0:1.4.3-1.Final_redhat_1.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jbossweb-0:7.3.0-1.Final_redhat_1.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-xnio-base-0:3.0.9-1.GA_redhat_1.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: netty-0:3.6.7-1.Final_redhat_1.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: picketbox-0:4.0.19-2.SP3_redhat_1.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: weld-core-0:1.1.17-1.Final_redhat_1.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: xml-security-0:1.5.6-1.redhat_1.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: xmltooling-0:1.3.4-5.redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Fuse Service Works 6.0Fixed in: xmltooling

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Portal Platform 6.1

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6 for RHEL 6Fixed in: jboss-as-modcluster-0:7.3.1-2.Final_redhat_3.1.ep6.el6

redhatno patchvia redhat_api

Product: Red Hat JBoss Portal 6Fixed in: xmltooling

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5Fixed in: xmltooling

redhatend of lifevia redhat_api

Product: Red Hat JBoss Portal 5Fixed in: xmltooling

Vendor Advisories (2)

mavenGHSA-v723-58jv-2qc4medium

Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML

redhatCVE-2013-6440Moderate

Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter

References

blog.sendsafely.com / post/69590974866/web-based-single-sign-on-and-the-dangers-of-saml-xml

rhn.redhat.com / errata/RHSA-2014-0170.html

rhn.redhat.com / errata/RHSA-2014-0171.html

rhn.redhat.com / errata/RHSA-2014-0172.html

rhn.redhat.com / errata/RHSA-2014-0195.html

bugzilla.redhat.com / show_bug.cgi

shibboleth.net / community/advisories/secadv_20131213.txt

oracle.com / security-alerts/cpujan2022.html