VulnerabilityModified

CVE-2014-0248

org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted…

MEDIUM 6.8EPSS 3.51%

Does this matter?

Lower severity and a low EPSS score (3.51%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 3.51% probability · 89th percentile
CISA KEV: Not listed
Weakness: CWE-94
Affected: redhat/jboss enterprise application platform · redhat/jboss enterprise web platform · redhat/jboss web framework kit
Source: secalert@redhat.com

References

http://rhn.redhat.com/errata/RHSA-2014-0785.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-0791.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-0792.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-0793.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-0794.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1888.html
http://secunia.com/advisories/59346
http://secunia.com/advisories/59554
http://secunia.com/advisories/59555
http://www.securitytracker.com/id/1030457
http://rhn.redhat.com/errata/RHSA-2014-0785.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-0791.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-0792.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-0793.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-0794.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1888.html
http://secunia.com/advisories/59346
http://secunia.com/advisories/59554
http://secunia.com/advisories/59555
http://www.securitytracker.com/id/1030457

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.