Red Hat Security Advisory: EAP Continuous Delivery Technical Preview Release 14 security update
JBoss: JAXP in EAP 7.0 allows RCE via XSL EAP: XXE issue in TransformerFactory
cpe:/a:redhat:jboss_enterprise_application_platform_cd:14