Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 14 security update
log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer
cpe:/a:redhat:jboss_enterprise_web_server:3.1