Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update
PicketLink: XXE via insecure DocumentBuilderFactory usage
cpe:/a:redhat:jboss_enterprise_application_platform:5.2.0