Red Hat Security Advisory: Red Hat JBoss EAP 7.4.17 XP 4.0.2 security release
jose4j: denial of service via specially crafted JWE undertow: url-encoded request path information can be broken on ajp-listener
cpe:/a:redhat:jbosseapxp