Login Request a demo
RI
Product
Richfaces
by Redhat · last CVE Nov 6, 2018
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 3High 0Medium 0Low 0
Severity
All severities6Critical3High0Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Richfaces to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-14667
In wildKEV
9.8
74%
Nov 6
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource
Affected: 3.1.0 through 3.3.4
CVE-2018-12533
9.8
19%
Jun 18
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring…
Affected: 3.1.0 through 3.3.4
CVE-2018-12532
9.8
7%
Jun 18
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a…
Affected: 4.5.3 through 4.5.17
CVE-2015-0279
–
4%
Mar 26
JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter
Affected: 4.0.0 through 4.5.4
CVE-2014-0086
–
1%
Mar 31
The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and…
Affected: 4.3.4; 4.3.5; 5.0.0; 5.0.0; 5.0.0
CVE-2013-2165
–
13%
Jul 23
ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss…
Affected: 3.1.0; 3.1.1; 3.1.2; 3.1.3; 3.1.4; 3.1.5; +20 more
Showing 6