An unknown cross-site scripting (XSS) vulnerability has been resolved in Google Web Toolkit (GWT) 2.5. GWT 2.4 GA and the 2.5 RC builds are affected.
External Reference: https://developers.google.com/web-toolkit/release-notes#Release_Notes_Current
This issue has been addressed in following products: JBoss Operations Network 3.1.2 Via RHSA-2013:0187 https://rhn.redhat.com/errata/RHSA-2013-0187.html