Skip to content
OpenAdvisories
Unscored RHSA-2013:1044 1 CVE

Red Hat Security Advisory: jboss-seam2 security update

Published Sep 15, 2024 · Updated Jan 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jboss-seam2 0:2.0.2.FP_SEC1-1.ep2.6.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jboss-seam2-docs 0:2.0.2.FP_SEC1-1.ep2.6.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jboss-seam2 0:2.0.2.FP_SEC1-1.ep2.6.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jboss-seam2-docs 0:2.0.2.FP_SEC1-1.ep2.6.el5

Vulnerabilities 1

  • High —
    CVE-2013-2165 Public exploit EPSS 13%

    Remote code execution due to insecure deserialization

    ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat…

    org.richfaces:richfaces Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=973570
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1044.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-2165
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-2165
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-2165