CVE:CVE-2017-7545
CNNVD:CNNVD-201704-330
jbpmmigration是一款流程定义的迁移工具。
jbpmmigration 6.5版本中的XmlUtils类存在安全漏洞。远程攻击者可利用该漏洞读取文件（限于运行该应用程序服务器用户可访问的文件）并可能实施高级的XML外部实体注入攻击。
solution:Upgrade redhat decision_manager to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat jboss_bpm_suite to a higher version than 6.4,and avoid the version 6.4; Upgrade redhat jbpm to a higher version than 6.5,and avoid the version 6.5