CVE-2013-6469: Red Hat JBoss Fuse Service Works

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information.

Affected products

• Red Hat JBoss Fuse Service Works: version 6.0 only
• Red Hat JBoss Overlord Run Time Governance: version 1.0 only

Published 2014-04-22. Last modified 2026-06-17.