The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss status page via an unspecified query.
https://exchange.xforce.ibmcloud.com/vulnerabilities/78449
http://www.websense.com/content/support/library/email/v72wes/release_notes/WES72_ReleaseNotes.pdf