Skip to content
OpenAdvisories

Vendor

[UNKNOWN]

239 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2018-14667 Exploited Public exploit EPSS 74%

    Richfaces vulnerable to arbitrary code execution

    The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4…

    KEV Sep 28, 2023