title: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.22 security update
description: tomcat: Host name verification missing in WebSocket client wildfly-core: Cross-site scripting (XSS) in JBoss Management Console dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:6::el6