Red Hat JBoss Drools vulnerabilities

2 CVEs affecting Red Hat JBoss Drools, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-7041, published 2018-09-10.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-7041, published 2018-09-10. Medium severity, CVSS 6.5. EPSS: 4% chance of exploitation in the next 30 days. Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected…
• CVE-2013-6468, published 2014-04-10. Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days. JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or…