Vulnerable JBoss entry points