Red Hat Security Advisory: jbossweb security update
Tomcat/JBossWeb: Arbitrary file upload via deserialization
cpe:/a:redhat:jboss_enterprise_application_platform:6::el5 cpe:/a:redhat:jboss_enterprise_application_platform:6::el6