Red Hat Security Advisory: Red Hat Process Automation Manager 7.5.0 Security Update
jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. jackson-databind: default typing mishandling leading to remote code execution
cpe:/a:redhat:jboss_enterprise_bpms_platform:7.5