title: Red Hat Security Advisory: Red Hat JBoss Fuse 6.3 security update
description: Framework: denial-of-service attack with XML input ObjectMessage: unsafe deserialization camel-xstream: Java object de-serialization vulnerability leads to RCE Camel: Java object deserialisation in Jetty/Servlet bouncycastle: Invalid curve attack allowing to extract private keys JGroups: Authorization bypass bsh2: remote code execution via deserialization shiro: Security constraint bypass
cpes: cpe:/a:redhat:jboss_fuse:6.3