Cross-site request forgery (CSRF) vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the authentication of users for requests that modify instances via a crafted web page.
An SQL injection vulnerability was found in dashbuilder.
Original Jira: https://issues.jboss.org/browse/DASHBUILDE-113