I\'m searching a way to fix Java deserialization vulnerability on Jboss 6.1 (Windows) but the most relevant i found was : https://www.synopsys.com/blogs/software-security/mi