Red Hat Security Advisory: Red Hat JBoss Web Server 5.3.1 security update
tomcat: deserialization flaw in session persistence storage leading to RCE
cpe:/a:redhat:jboss_enterprise_web_server:5.3::el6 cpe:/a:redhat:jboss_enterprise_web_server:5.3::el7 cpe:/a:redhat:jboss_enterprise_web_server:5.3::el8