In EAP 7.1.0.DR9 we are still using jasypt version 1.9.1 (1.9.1.redhat-1) while upstream CXF/WSS4J have the latest official 1.9.2 dependency (http://mvnrepository.com/artifact/org.jasypt/jasypt/1.9.2).

1.9.2 has some important changes (http://www.jasypt.org/changelogs/jasypt/ChangeLog.txt)
There is also a http://mvnrepository.com/artifact/org.jasypt/jasypt/1.9.3.redhat_3 version but I wasn't able to find the source repository it cames from.

Anyway I think there is no reason to use older version and we could simply upgrade.