Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.1 commons-collections security update
apache-commons-collections: InvokerTransformer code execution during deserialisation
cpe:/a:redhat:jboss_enterprise_web_server:3.0