title: Red Hat Security Advisory: Red Hat JBoss SOA Platform 5.3.1 security update
description: CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix XStream: remote code execution due to insecure XML deserialization Xalan-Java: insufficient constraints in secure processing feature Seam: RCE via unsafe logging in AuthenticationFilter PicketLink: XXE via insecure DocumentBuilderFactory usage CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix SSL: Hostname verification susceptible to MITM attack
cpes: cpe:/a:redhat:jboss_enterprise_soa_platform:5.3