CVE-2017-3165: Cross-site vulnerabilities in Apache Brooklyn
CVE-2016-8737: Cross-site request forgery vulnerability in Apache Brooklyn
CVE-2016-8744: Apache Brooklyn, SnakeYAML configuration potentially allows remote code execution