title: Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.4.5 security update
description: jasypt: Vulnerable to timing attack against the password hash comparison batik: XML external entity processing vulnerability jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper
cpes: cpe:/a:redhat:jboss_bpms:6.4