CVE-2018-14667

CRITICAL

9.8

CVSS Score

Published: November 6, 2018 at 10:00 PM UTC

Updated: June 17, 2026 at 01:41 AM UTC

2 products affected across 1 vendorEnterprise LinuxRichfaces

Using RichFaces by [UNKNOWN]?

Get instant alerts when new vulnerabilities affect RichFaces - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploitation

CISA KEV

Exploit prediction

EPSS 74%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score74.2%

EPSS (Exploit Prediction Scoring System) estimates a 74.2% chance this CVE is exploited in the wild within the next 30 days — higher than 99% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Ransomware Use

Unknown

Added to KEV

Sep 28, 2023

Remediation Due

Oct 19, 2023

1103 days overdue

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667

https://nvd.nist.gov/vuln/detail/CVE-2018-14667

Description

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.