Red Hat Security Advisory: Red Hat JBoss Web Server 5.5.0 Security release
hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used tomcat: Request mix-up with h2c tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence)
cpe:/a:redhat:jboss_enterprise_web_server:5.5::el7 cpe:/a:redhat:jboss_enterprise_web_server:5.5::el8