title: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
description: jasypt: Vulnerable to timing attack against the password hash comparison bouncycastle: Information disclosure in GCMBlockCipher keycloak: SAML request parser replaces special strings with system properties log4j: Socket receiver deserialization vulnerability hibernate-validator: Privilege escalation when running under the security manager
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:7::el6