Known Exploited Vulnerabilities September 28, 2023 · CISA KEV Catalog

CVE-2018-14667: Red Hat JBoss Rich Faces Framework Expression Language Injection Vulnerability

Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2018-14667Red Hat

Related

CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Aug 26, 2026

CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability Known Exploited Vulnerabilities · Aug 26, 2026

CVE-2021-3560: Red Hat Polkit Incorrect Authorization Vulnerability Known Exploited Vulnerabilities · May 12, 2023