Red Hat Security Advisory: Red Hat JBoss BPM Suite security update
Dashbuilder: Reflected XSS Dashbuilder: insecure handling of CSRF token Dashbuilder: Lack of clickjacking protection on the login page
cpe:/a:redhat:jboss_bpms:6.4