Vulnerability Details CVE-2013-6468
JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or (2) Drools expression.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.4%
CVSS Severity
CVSS v2 Score 6.5
References
- http://rhn.redhat.com/errata/RHSA-2014-0371.html
- http://rhn.redhat.com/errata/RHSA-2014-0372.html
- http://secunia.com/advisories/57716
- http://secunia.com/advisories/57719
- http://rhn.redhat.com/errata/RHSA-2014-0371.html
- http://rhn.redhat.com/errata/RHSA-2014-0372.html
- http://secunia.com/advisories/57716
- http://secunia.com/advisories/57719
Products affected by CVE-2013-6468
-
cpe:2.3:a:redhat:jboss_bpm_suite:6.0.0
-
cpe:2.3:a:redhat:jboss_drools:-
-
cpe:2.3:a:redhat:jboss_enterprise_brms_platform:6.0.0