title: Red Hat Security Advisory: Red Hat JBoss EAP 7.4.17 XP 4.0.2 security release
description: jose4j: denial of service via specially crafted JWE undertow: url-encoded request path information can be broken on ajp-listener
cpes: cpe:/a:redhat:jbosseapxp