title: Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.7.0 update
description: CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix RESTEasy: XXE via parameter entities Validator: JSM bypass via ReflectionHelper CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix
cpes: cpe:/a:redhat:jboss_enterprise_web_framework:2.7.0