title: Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.4.8.SP2 security update
description: log4j: deserialization of untrusted data in SocketServer log4j: improper validation of certificate with host mismatch in SMTP appender log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer
cpes: cpe:/a:redhat:jboss_data_virtualization:6.4