Red Hat Security Advisory: Red Hat JBoss BRMS 6.4.11 security update
slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution
cpe:/a:redhat:jboss_enterprise_brms_platform:6.4