Red Hat JBoss Seam 2 Framework vulnerabilities

4 CVEs affecting Red Hat JBoss Seam 2 Framework, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-6448, published 2014-01-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-6447, published 2014-01-23. Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days. Multiple XML External Entity (XXE) vulnerabilities in the (1) ExecutionHandler, (2) PollHandler, and (3) SubscriptionHandler classes in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and…
CVE-2011-2196, published 2011-07-27. Medium severity, CVSS 6.8. EPSS: 2.6% chance of exploitation in the next 30 days. jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or…
CVE-2011-1484, published 2011-07-27. Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days. jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP…
CVE-2013-6448, published 2014-01-23. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allows remote attackers to bypass the WebRemote annotation…