Red Hat Security Advisory: Red Hat Fuse 7.3.1 security update
bsh2: remote code execution via deserialization log4j: Socket receiver deserialization vulnerability uima: XML external entity expansion (XXE) can allow attackers to execute arbitrary code mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) thrift: Improper Access Control grants access to files outside the  webservers docroot path log4j: deserialization of untrusted data in SocketServer
cpe:/a:redhat:jboss_fuse:7