6.4.2

DATE	CVE	VULNERABILITY TITLE	RISK
2018-07-27	CVE-2017-7463	Cross-site Scripting vulnerability in Redhat Jboss BPM Suite JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. network low complexity redhat CWE-79	6.1
2018-07-27	CVE-2017-2674	Cross-site Scripting vulnerability in Redhat Jboss BPM Suite JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. network low complexity redhat CWE-79	5.4