Known vulnerabilities in JBoss Richfaces

Vendor: Red Hat Inc.
Software: JBoss Richfaces
Software CPE: cpe:2.3:a:red_hat:jboss_richfaces:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 3
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Richfaces JBoss Richfaces is affected by 3 known vulnerabilities: 3 high Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29193 - Improper Control of Generation of Code ('Code Injection')
CVE-2015-0279		 CWE-94 High
No
No
 4.5.4 22.06.2020 SB2015032601
SB2020062211
#VU15750 - Deserialization of Untrusted Data
CVE-2018-14667		 CWE-502 High
Available
Exploited
 - 06.11.2018 SB2018110713
#VU15407 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-12533		 CWE-94 High
No
No
 - 17.10.2018 SB2018101802