codehaus is vulnerable to arbitrary code execution. An incomplete fix for unsafe deserialization in jackson-databind allows an attacker to inject malicious objects and execute arbitrary code.
access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/
access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/
access.redhat.com/errata/RHSA-2019:2937
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10202
issues.jboss.org/browse/JBEAP-16455
issues.jboss.org/browse/JBEAP-16779
issues.jboss.org/browse/JBEAP-17045
issues.jboss.org/browse/JBEAP-17062
issues.jboss.org/browse/JBEAP-17073
issues.jboss.org/browse/JBEAP-17109
issues.jboss.org/browse/JBEAP-17112
issues.jboss.org/browse/JBEAP-17144
issues.jboss.org/browse/JBEAP-17162
issues.jboss.org/browse/JBEAP-17178
issues.jboss.org/browse/JBEAP-17182
issues.jboss.org/browse/JBEAP-17183
issues.jboss.org/browse/JBEAP-17223
issues.jboss.org/browse/JBEAP-17238
issues.jboss.org/browse/JBEAP-17250
issues.jboss.org/browse/JBEAP-17271
issues.jboss.org/browse/JBEAP-17273
issues.jboss.org/browse/JBEAP-17274
issues.jboss.org/browse/JBEAP-17276
issues.jboss.org/browse/JBEAP-17277
issues.jboss.org/browse/JBEAP-17278
issues.jboss.org/browse/JBEAP-17294
issues.jboss.org/browse/JBEAP-17311
issues.jboss.org/browse/JBEAP-17320
issues.jboss.org/browse/JBEAP-17321
issues.jboss.org/browse/JBEAP-17334
issues.jboss.org/browse/JBEAP-17527
lists.apache.org/thread.html/r0fbf2c60967bc9f73d7f5a62ad3b955789f9a14b950f42e99fca9b4e%40%3Cissues.hive.apache.org%3E
lists.apache.org/thread.html/r0fbf2c60967bc9f73d7f5a62ad3b955789f9a14b950f42e99fca9b4e@%3Cissues.hive.apache.org%3E
lists.apache.org/thread.html/r1edabcfacdad42d3c830464e9cf07a9a489059a7b7a8642cf055542d%40%3Cissues.hive.apache.org%3E
lists.apache.org/thread.html/r1edabcfacdad42d3c830464e9cf07a9a489059a7b7a8642cf055542d@%3Cissues.hive.apache.org%3E
lists.apache.org/thread.html/r356592d9874ab4bc9da4754592f8aa6edc894c95e17e58484bc2af7a%40%3Cissues.hive.apache.org%3E
lists.apache.org/thread.html/r356592d9874ab4bc9da4754592f8aa6edc894c95e17e58484bc2af7a@%3Cissues.hive.apache.org%3E
lists.apache.org/thread.html/r500867b74f42230a3d65b8aec31fc93ac390eeae737c91a759ab94cb%40%3Cissues.hive.apache.org%3E
lists.apache.org/thread.html/r500867b74f42230a3d65b8aec31fc93ac390eeae737c91a759ab94cb@%3Cissues.hive.apache.org%3E
lists.apache.org/thread.html/r5f16a1bd31a7e94ca78eda686179930781aa3a4a990cd55986703581%40%3Cdev.hive.apache.org%3E
lists.apache.org/thread.html/r5f16a1bd31a7e94ca78eda686179930781aa3a4a990cd55986703581@%3Cdev.hive.apache.org%3E
lists.apache.org/thread.html/r6dea2a887f5eb1d68f124d64b14cd1a04f682f06de8cd01b7e4214e0%40%3Cissues.hive.apache.org%3E
lists.apache.org/thread.html/r6dea2a887f5eb1d68f124d64b14cd1a04f682f06de8cd01b7e4214e0@%3Cissues.hive.apache.org%3E
lists.apache.org/thread.html/rce00a1c60f7df4b10e72fa87827c102f55b074bb91993631df2c21f9%40%3Cdev.hive.apache.org%3E
lists.apache.org/thread.html/rce00a1c60f7df4b10e72fa87827c102f55b074bb91993631df2c21f9@%3Cdev.hive.apache.org%3E
lists.apache.org/thread.html/refea6018a2c4e9eb7838cab567ed219c3f726dcd83a5472fbb80d8d9%40%3Cissues.flume.apache.org%3E
lists.apache.org/thread.html/refea6018a2c4e9eb7838cab567ed219c3f726dcd83a5472fbb80d8d9@%3Cissues.flume.apache.org%3E