Red Hat Security Advisory: Red Hat JBoss BRMS 5.3.1 security update
RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution
cpe:/a:redhat:jboss_enterprise_brms_platform:5.3