Vendor/product archive

redhat / jboss_web_framework_kit CVEs

Beta · best-effort

4 CVEs tagged to redhat / jboss_web_framework_kit — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to redhat vendor archive

CVE-2014-0248

Published Jul 7, 2014

org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-0149

Published May 5, 2014

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter or (…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-0086

Published Mar 31, 2014

The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2013-2165

Published Jul 23, 2013

ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss E…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1