title: Red Hat Security Advisory: Red Hat JBoss Data Grid 6.3.0 update
description: EAP6: Plain text password logging during security audit JBossSX/PicketBox: World readable audit.log file Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs Tomcat/JBossWeb: Request smuggling via malicious content length header Tomcat/JBossWeb: XML parser hijack by malicious web application JAX-RS: Information disclosure via XML eXternal Entity (XXE)
cpes: cpe:/a:redhat:jboss_data_grid:6.3.0