GCVE - cpe:2.3:a:redhat:richfaces:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:richfaces:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Richfaces (`779d643f-bfe5-5233-a8aa-675a4f2ac341`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/richfaces/richfaces`	purl2cpe	2026-06-01 10:12:53.086019

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-14667`	vulnerable	2026-06-08 05:10:53.269838	Details available CRITICAL (9.8) The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData. Published: 2018-11-06T22:00:00.000Z Updated: 2025-10-21T23:45:47.440Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667 https://access.redhat.com/errata/RHSA-2018:3519 https://access.redhat.com/errata/RHSA-2018:3581 https://access.redhat.com/errata/RHSA-2018:3518 https://access.redhat.com/errata/RHSA-2018:3517	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12533`	vulnerable	2026-06-08 05:10:41.670258	Details available JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310. Published: 2018-06-18T12:00:00.000Z Updated: 2024-08-05T08:38:06.257Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2018:2664 http://www.securitytracker.com/id/1041617 https://codewhitesec.blogspot.com/2018/05/poor-richfaces.html https://access.redhat.com/errata/RHSA-2018:2663 http://www.securityfocus.com/bid/104502	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12532`	vulnerable	2026-06-08 05:10:41.667542	Details available JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309. Published: 2018-06-18T12:00:00.000Z Updated: 2024-08-05T08:38:05.956Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/104503 https://codewhitesec.blogspot.com/2018/05/poor-richfaces.html http://seclists.org/fulldisclosure/2020/Mar/21	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0279`	vulnerable	2026-06-08 05:06:14.205582	Details available JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter. Published: 2015-03-26T14:00:00.000Z Updated: 2024-08-06T04:03:10.884Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1192140 http://rhn.redhat.com/errata/RHSA-2015-0719.html http://jvn.jp/en/jp/JVN56297719/index.html http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html http://seclists.org/fulldisclosure/2019/Jul/21	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.