Moved to appropriate forum.
I am pretty sure there was no fix for that, you should really upgrade your app server.
As you can see from CVEs linked it was fixed in EAP 4.2 & 4.3 but that are commercial offerings.
Also this fixes are part of AS5 and later.
Thank you for your quick response. Do you know how do I down that version? EAP 4.2?
For AS you can download from below :
And for EAP you can find at https://access.redhat.com ,but for that you should have subscription from redhat.