Unscored severity · published Apr 22, 2014
CVE-2013-6469
JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression
–
CVSS
1.7%
EPSS
No
On KEV
Description
JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JF
Jboss Fuse Service Works · Redhat
6.0 · source: NVD
JO
Jboss Overlord Run Time Governance · Redhat
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6469
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6469
Vendor Advisory
http://secunia.com/advisories/57843
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1051279
More from Jboss Fuse Service Works
9.8
CVE-2015-7501
Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x;…
7.5
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration