Login Request a demo
RI
Product
Richfaces
by Redhat · last CVE Nov 6, 2018
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 3High 0Medium 0Low 0
Severity
All severities6Critical3High0Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Richfaces to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-14667
In wildKEV
9.8
74%
Nov 6
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource
Affected: 3.1.0 through 3.3.4
CVE-2018-12533
9.8
19%
Jun 18
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring…
Affected: 3.1.0 through 3.3.4
CVE-2018-12532
9.8
7%
Jun 18
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a…
Affected: 4.5.3 through 4.5.17
Showing 3