Attackers are actively exploiting a known vulnerability to compromise JBoss Java EE application servers that expose the HTTP Invoker service to the Internet in an insecure manner.

 Hackers actively exploiting JBoss vulnerability to compromise servers, researchers say