title: Red Hat Security Advisory: Red Hat JBoss Web Server 5.5.0 security release
description: hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used tomcat: Request mix-up with h2c tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence)
cpes: cpe:/a:redhat:jboss_enterprise_web_server:5.5