title: Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.6.0 update
description: bouncycastle: TLS CBC padding timing attack JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions
cpes: cpe:/a:redhat:jboss_enterprise_web_framework:2.6.0