Red Hat Security Advisory: Red Hat JBoss BRMS 5.3.1 commons-collections security update
apache-commons-collections: InvokerTransformer code execution during deserialisation
cpe:/a:redhat:jboss_enterprise_brms_platform:5.3