Release Automation 6.5 Security Vulnerabilities

[Chris Blystone]

CVE-2013-2470

CVE-2013-2472

CVE-2013-2465

Are these Vulnerabilities legitimate for 6.5?  If so, Path to remediation? 

Considering update to 6.7?