missing artifact: org.jboss.web:jbossweb:jar:7.2.2.Final-redhat-1
artifact included in Maven repository zip: 7.3.0.Final-redhat-1
jboss-javaee-6.0-with-security BOM is documented for customer usage 
The same problem was fixed in EAP 6.2.0, see BZ 999846
I'm not sure how this happened. The update to the new version was made on the boms in git, but for some reason the boms in the Maven repo still had the old jboss web version. Anyway, it looks ok in the recent builds.
Verified for 6.2.1.CP.CR3.