title: Red Hat Security Advisory: Red Hat JBoss BPM Suite security update
description: pdfbox: XML External Entity vulnerability tika: XML External Entity vulnerability JBoss bpms 6.3.x cookie does not set httponly bpms: stored XSS in dashbuilder
cpes: cpe:/a:redhat:jboss_bpms:6.4