title: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.5 update
description: EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server apache-commons-collections: InvokerTransformer code execution during deserialisation
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:6.4