[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuk8YlNFVrBJ7884eQuLYA4_PEmIgBFyOrZJFG6LwDk0":3,"g5a-family:redhat\u002Frichfaces":221,"g5a-ex:redhat\u002Frichfaces@*":222},{"success":4,"data":5},true,{"product":6,"versions":108,"topVulnerabilitiesByEpss":154,"kevVulnerabilities":193,"seoMetadata":199,"meta":218},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":107},"redhat","richfaces",45,6,1,"2018-11-06",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"3.1.0",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"3.1.1",{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},"3.1.2",{"version":23,"cve_count":11,"kev_count":16,"has_kev":17},"3.1.3",{"version":25,"cve_count":11,"kev_count":16,"has_kev":17},"3.1.4",{"version":27,"cve_count":11,"kev_count":16,"has_kev":17},"3.1.5",{"version":29,"cve_count":11,"kev_count":16,"has_kev":17},"3.1.6",{"version":31,"cve_count":11,"kev_count":16,"has_kev":17},"3.2.0",{"version":33,"cve_count":11,"kev_count":16,"has_kev":17},"3.2.1",{"version":35,"cve_count":11,"kev_count":16,"has_kev":17},"3.2.2",{"version":37,"cve_count":11,"kev_count":16,"has_kev":17},"3.3.0",{"version":39,"cve_count":11,"kev_count":16,"has_kev":17},"3.3.1",{"version":41,"cve_count":11,"kev_count":16,"has_kev":17},"3.3.2",{"version":43,"cve_count":11,"kev_count":16,"has_kev":17},"3.3.3",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"3.3.4",{"version":47,"cve_count":11,"kev_count":16,"has_kev":17},"4.0.0",{"version":49,"cve_count":11,"kev_count":16,"has_kev":17},"4.1.0",{"version":51,"cve_count":11,"kev_count":16,"has_kev":17},"4.2.0",{"version":53,"cve_count":11,"kev_count":16,"has_kev":17},"4.2.1",{"version":55,"cve_count":11,"kev_count":16,"has_kev":17},"4.2.2",{"version":57,"cve_count":11,"kev_count":16,"has_kev":17},"4.2.3",{"version":59,"cve_count":11,"kev_count":16,"has_kev":17},"4.3.0",{"version":61,"cve_count":11,"kev_count":16,"has_kev":17},"4.3.1",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"4.3.3",{"version":65,"cve_count":11,"kev_count":16,"has_kev":17},"4.3.4",{"version":67,"cve_count":11,"kev_count":16,"has_kev":17},"4.3.5",{"version":69,"cve_count":11,"kev_count":16,"has_kev":17},"4.5.0",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.1",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.10",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.11",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.12",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.13",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.14",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.15",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.16",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.17",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.2",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.3",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.4",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.5",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.6",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.7",{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.8",{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.9",{"version":105,"cve_count":106,"kev_count":16,"has_kev":17},"5.0.0",2,"Richfaces by Redhat is a technology product with 45 tracked versions and 6 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},{"version":23,"cve_count":11,"kev_count":16,"has_kev":17},{"version":25,"cve_count":11,"kev_count":16,"has_kev":17},{"version":27,"cve_count":11,"kev_count":16,"has_kev":17},{"version":29,"cve_count":11,"kev_count":16,"has_kev":17},{"version":31,"cve_count":11,"kev_count":16,"has_kev":17},{"version":33,"cve_count":11,"kev_count":16,"has_kev":17},{"version":35,"cve_count":11,"kev_count":16,"has_kev":17},{"version":37,"cve_count":11,"kev_count":16,"has_kev":17},{"version":39,"cve_count":11,"kev_count":16,"has_kev":17},{"version":41,"cve_count":11,"kev_count":16,"has_kev":17},{"version":43,"cve_count":11,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":11,"kev_count":16,"has_kev":17},{"version":49,"cve_count":11,"kev_count":16,"has_kev":17},{"version":51,"cve_count":11,"kev_count":16,"has_kev":17},{"version":53,"cve_count":11,"kev_count":16,"has_kev":17},{"version":55,"cve_count":11,"kev_count":16,"has_kev":17},{"version":57,"cve_count":11,"kev_count":16,"has_kev":17},{"version":59,"cve_count":11,"kev_count":16,"has_kev":17},{"version":61,"cve_count":11,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":11,"kev_count":16,"has_kev":17},{"version":67,"cve_count":11,"kev_count":16,"has_kev":17},{"version":69,"cve_count":11,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},{"version":105,"cve_count":106,"kev_count":16,"has_kev":17},[155,162,168,176,180,187],{"cveId":156,"description":157,"publishedDate":12,"cvssScore":158,"cvssVersion":159,"severity":160,"isKev":4,"epssScore":161},"CVE-2018-14667","The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.",9.8,"v3.1","Critical",0.74202,{"cveId":163,"description":164,"publishedDate":165,"cvssScore":158,"cvssVersion":166,"severity":160,"isKev":17,"epssScore":167},"CVE-2018-12533","JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a \u002FDATA\u002F substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.","2018-06-18","v3.0",0.19041,{"cveId":169,"description":170,"publishedDate":171,"cvssScore":172,"cvssVersion":173,"severity":174,"isKev":17,"epssScore":175},"CVE-2013-2165","ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.","2013-07-23",7.5,"v2","High",0.12662,{"cveId":177,"description":178,"publishedDate":165,"cvssScore":158,"cvssVersion":166,"severity":160,"isKev":17,"epssScore":179},"CVE-2018-12532","JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.",0.07049,{"cveId":181,"description":182,"publishedDate":183,"cvssScore":184,"cvssVersion":173,"severity":185,"isKev":17,"epssScore":186},"CVE-2015-0279","JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.","2015-03-26",6.8,"Medium",0.03929,{"cveId":188,"description":189,"publishedDate":190,"cvssScore":191,"cvssVersion":173,"severity":185,"isKev":17,"epssScore":192},"CVE-2014-0086","The doFilter function in webapp\u002FPushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a large number of malformed atmosphere push requests.","2014-03-31",4.3,0.01451,[194],{"cveId":156,"description":157,"publishedDate":12,"cvssScore":158,"severity":160,"isKev":4,"epssScore":161,"cisaVulnName":195,"cisaDateAdded":196,"cisaShortDescription":197,"cisaRequiredAction":198},"Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","2023-09-28","Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":200,"metaDescription":201,"keywords":202,"structuredData":203},"Richfaces by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Richfaces by Redhat covering 45 versions with 6 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Richfaces vulnerabilities, Richfaces security, Richfaces CVE, Redhat Richfaces, Richfaces threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Richfaces KEV, Richfaces exploited vulnerabilities",{"@context":204,"@type":205,"name":206,"description":201,"url":207,"manufacturer":208,"applicationCategory":212,"softwareVersion":213,"mainEntity":214},"https:\u002F\u002Fschema.org","SoftwareApplication","Richfaces","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Frichfaces",{"@type":209,"name":210,"url":211},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","45 versions tracked",{"@type":215,"name":216,"description":217,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Richfaces Security Vulnerabilities","Security vulnerabilities affecting Richfaces by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":219,"apiVersion":220},"2026-10-18T23:52:33.209Z","3.0",[],{"rows":223,"total":11,"capped":17,"failed":16},[224],{"cveId":156,"name":195,"severity":160,"cvss":158,"added":196,"epss":161,"published":225,"ranges":226,"checked":4,"hits":228,"covers":17},"2018-11-06T22:29:00.193",[227],"3.1.0 to 3.3.4",[]]