title: Red Hat Security Advisory: Red Hat JBoss Operations Network 3.3.11 security and bug fix update
description: jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) tomcat: A bug in the UTF-8 decoder can lead to DoS slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution RichFaces: Injection of arbitrary EL expressions allows remote code execution via org.richfaces.renderkit.html.Paint2DResource
cpes: cpe:/a:redhat:jboss_operations_network:3.3