Red Hat JBoss Web Framework Kit vulnerabilities

4 CVEs affecting Red Hat JBoss Web Framework Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0248, published 2014-07-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-2165, published 2013-07-23. High severity, CVSS 7.5. EPSS: 12.7% chance of exploitation in the next 30 days. ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise…
CVE-2014-0248, published 2014-07-07. Medium severity, CVSS 6.8. EPSS: 3.5% chance of exploitation in the next 30 days. org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote…
CVE-2014-0086, published 2014-03-31. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a…
CVE-2014-0149, published 2014-05-05. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter or (2) id name.