Security Advisory
CVE-2016-3690
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload.