(RHSA-2016:1429) Important: Red Hat JBoss BPM Suite 6.3.1 security and bug fix update

Red Hat JBoss BPM Suite is a business rules and processes management system for the management, storage, creation, modification, and deployment of JBoss rules and BPMN2-compliant business processes.

Security Fix(es):

• A security flaw was found in the way Dashbuilder performed SQL datasets lookup requests in the Data Set Authoring UI or the Displayer editor UI. A remote attacker could use this flaw to conduct SQL injection attacks via specially-crafted string filter parameter. (CVE-2016-4999)

This issue was discovered by David Gutierrez (Red Hat).