I have searched the Mitre and NVD databases for CVEs that are applicable to JBoss AS7 with no luck. Does anyone know where to obtain a comprehensive list. Has some of the CVEs being implemented?
Red Hat maintains CVE for commercial offering JBoss EAP which is based on JBoss AS. In case of AS7 commercial counter part is EAP6.x
Read more about it here:
Retrieving data ...