Red Hat Security Advisory: Red Hat JBoss Web Server 2.0.1 tomcat7 security update
Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs Tomcat/JBossWeb: Request smuggling via malicious content length header
cpe:/a:redhat:jboss_enterprise_web_server:2::el5 cpe:/a:redhat:jboss_enterprise_web_server:2::el6