Red Hat Security Advisory: jbossweb security update
tomcat: Cross-Site-Scripting enabled by sendError call tomcat RequestDispatcher information disclosure vulnerability tomcat Unicode directory traversal vulnerability
cpe:/a:redhat:jboss_enterprise_application_platform:4.2.0::el4 cpe:/a:redhat:jboss_enterprise_application_platform:4.2.0::el5 cpe:/a:redhat:jboss_enterprise_application_platform:4.3.0::el4 cpe:/a:redhat:jboss_enterprise_application_platform:4.3.0::el5