title: Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.3 update
description: HawtJNI: predictable temporary file name leading to local arbitrary code execution Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter jboss-as-server: Unchecked access to MSC Service Registry under JSM EAP6: Plain text password logging during security audit 6: JSM policy not respected by deployed applications Xalan-Java: insufficient constraints in secure processing feature
cpes: cpe:/a:redhat:jboss_bpms:6.0