Red Hat Security Advisory: tomcat security update
Tomcat/JBossWeb: XML parser hijack by malicious web application
cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation