Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.4.6 security update
log4j: Socket receiver deserialization vulnerability XStream: DoS when unmarshalling void type log4j: deserialization of untrusted data in SocketServer
cpe:/a:redhat:jboss_bpms:6.4