This hotfix can be downloaded from the SFDC Customer Portal Web User Interface using your username and password for the TIBCO Support Web.
Once logged on you can find the hotfix under the Downloads Menu: "AvailableDownloads/ActiveFulfillment/4.0.2/Hotfix-3"

TIB_fom_4.0.2_HF-003.zip file includes the Readme file inside. 
Please unzip this file and look for the Readme file for Instruction on how to apply the hotfix.

================================================================================
Closed Issues in 4.0.2_HF-003 (This Release)

AF-8958
You could not add bundles to the shopping cart, and the following message 
was displayed: "500 internal server exception."

AF-8957
Order Management Server UI was not accessible due to HF build issue.

AF-8942
Due to certain queries issued by Fulfillment Order Management, 
Oracle System Global Area increased over time.

AF-8937
Support for OpenShift has been added in Fulfillment Order Management.

AF-8933
The Customization Summary page did not cover all information as it did
in Fulfillment Order Management 3.0.2.

AF-8893
Automated Order Plan Development generated the plan before the startup 
process was completed.

AF-8890
The "userservice.sh" delete action could not delete a user.

AF-8886
Fulfillment Order Management log4j did not provide the orderRef value in logs. 

AF-8806
Order Capture System UI had rendering issues.

AF-8804
Order Capture System failed to start when OFFERID was included in the catalog.

AF-8802
Order Capture System UI did not display the child products of a parent product 
(when the child products were retrieved from the group).

AF-8792
When TIBCO Enterprise Message Service (EMS) with SSL was enabled, 
Fulfillment Order Management could not connect to the EMS server.