title: Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.1 update
description: OpenJDK: XML parsing Denial of Service (JAXP, 8017298) RESTeasy: External entities expanded by DocumentProvider Weld: Limited information disclosure via stale thread state wss4j: Apache WSS4J is vulnerable to Bleichenbacher's attack (incomplete fix for CVE-2011-2487) wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property
cpes: cpe:/a:redhat:jboss_data_grid:6.4.1