Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.1.2
undertow: Path traversal in ServletResourceManager class undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution
cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7 cpe:/a:redhat:jboss_enterprise_application_platform:7::el6