Known Vulnerabilities in hibernate4-entitymanager