Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.3 security update
hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used
cpe:/a:redhat:jboss_enterprise_application_platform:7.3