title: Red Hat Security Advisory: EAP XP 2 security update to CVE fixes in the EAP 7.3.x base
description: velocity: arbitrary code execution when attacker is able to modify templates bouncycastle: Timing issue within the EC math library bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible wildfly: XSS via admin console when creating roles in domain mode undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client netty: Information disclosure via the local system temporary directory netty: possible request smuggling in HTTP/2 due missing validation netty: Request smuggling via content-length header
cpes: cpe:/a:redhat:jbosseapxp