CISA adds JBoss RichFaces Framework flaw to its Known Exploited Vulnerabilities catalog

US CISA added the flaw CVE-2018-14667 in Red Hat JBoss RichFaces Framework to its Known Exploited Vulnerabilities catalog. US Cybersecurity and Infrastructure Security Agency (CISA) added the critical flaw CVE-2018-14667 (CVSS score 9.8) affecting Red Hat JBoss RichFaces Framework to its Known Exploited Vulnerabilities Catalog. The issue is an Expression Language (EL) injection via the UserResource resource, […]

The post CISA adds JBoss RichFaces Framework flaw to its Known Exploited Vulnerabilities catalog appeared first on Security Affairs.

agency breaking news catalog cisa critical critical flaw cve cvss cybersecurity exploited exploited vulnerabilities flaw framework hacking information security news infrastructure infrastructure security issue it information security known exploited known exploited vulnerabilities known exploited vulnerabilities catalog pierluigi paganini red hat score security us cisa vulnerabilities