title: Red Hat Security Advisory: Red Hat JBoss BPM Suite security update
description: XStream: enabled processing of external entities Workbench: Path traversal vulnerability Stored XSS in business process editor
cpes: cpe:/a:redhat:jboss_bpms:6.3