title: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 update
description: CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill JAX-RS: Information disclosure via XML eXternal Entity (XXE)
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:6.2.4