Java JBOSS

Exploiting JBoss jmx-console

Exploiting JBoSS like a BOSSMedium

Metasploit Modules

auxiliary/scanner/http/tomcat_enum
exploit/multi/http/tomcat_mgr_deploy

JBOSS in Symantec End-point Protection

Websphere/JBoss/OpenNMS/Symantec Endpoint Protection Manager - Java Deserialization Remote Code ExecutionExploit Database