CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2165

ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.341

EPSS Ranking 96.7%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2013-2165

Redhat » Jboss Enterprise Application Platform » Version: 4.3.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0
Redhat » Jboss Enterprise Application Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0
Redhat » Jboss Enterprise Application Platform » Version: 5.0.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1
Redhat » Jboss Enterprise Application Platform » Version: 5.1.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0
Redhat » Jboss Enterprise Application Platform » Version: 5.1.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1
Redhat » Jboss Enterprise Application Platform » Version: 5.1.2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2
Redhat » Jboss Enterprise Application Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.0.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.0.1

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.0.1
Redhat » Jboss Enterprise Brms Platform » Version: 5.0.2

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.0.2
Redhat » Jboss Enterprise Brms Platform » Version: 5.1.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.1.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.2.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.3.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.3.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.3.1

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.3.1
Redhat » Jboss Enterprise Portal Platform » Version: 4.3.0

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0
Redhat » Jboss Enterprise Portal Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0
Redhat » Jboss Enterprise Portal Platform » Version: 5.0.1

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1
Redhat » Jboss Enterprise Portal Platform » Version: 5.1.0

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0
Redhat » Jboss Enterprise Portal Platform » Version: 5.1.1

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.1
Redhat » Jboss Enterprise Portal Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.0
Redhat » Jboss Enterprise Portal Platform » Version: 5.2.1

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.1
Redhat » Jboss Enterprise Portal Platform » Version: 5.2.2

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.2
Redhat » Jboss Enterprise Soa Platform » Version: 4.2.0

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0
Redhat » Jboss Enterprise Soa Platform » Version: 4.3.0

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0
Redhat » Jboss Enterprise Soa Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.0.0
Redhat » Jboss Enterprise Soa Platform » Version: 5.0.1

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.0.1
Redhat » Jboss Enterprise Soa Platform » Version: 5.0.2

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.0.2
Redhat » Jboss Enterprise Soa Platform » Version: 5.1.0

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.1.0
Redhat » Jboss Enterprise Soa Platform » Version: 5.1.1

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.1.1
Redhat » Jboss Enterprise Soa Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.2.0
Redhat » Jboss Enterprise Soa Platform » Version: 5.3.0

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.3.0
Redhat » Jboss Enterprise Soa Platform » Version: 5.3.1

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.3.1
Redhat » Jboss Enterprise Web Platform » Version: 5.1.0

cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.1.0
Redhat » Jboss Enterprise Web Platform » Version: 5.1.1

cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.1.1
Redhat » Jboss Enterprise Web Platform » Version: 5.1.2

cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.1.2
Redhat » Jboss Enterprise Web Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0
Redhat » Jboss Operations Network » Version: 1.0.0

cpe:2.3:a:redhat:jboss_operations_network:1.0.0
Redhat » Jboss Operations Network » Version: 2.0.0

cpe:2.3:a:redhat:jboss_operations_network:2.0.0
Redhat » Jboss Operations Network » Version: 2.0.1

cpe:2.3:a:redhat:jboss_operations_network:2.0.1
Redhat » Jboss Operations Network » Version: 2.1.0

cpe:2.3:a:redhat:jboss_operations_network:2.1.0
Redhat » Jboss Operations Network » Version: 2.2

cpe:2.3:a:redhat:jboss_operations_network:2.2
Redhat » Jboss Operations Network » Version: 2.3

cpe:2.3:a:redhat:jboss_operations_network:2.3
Redhat » Jboss Operations Network » Version: 2.3.1

cpe:2.3:a:redhat:jboss_operations_network:2.3.1
Redhat » Jboss Operations Network » Version: 2.4

cpe:2.3:a:redhat:jboss_operations_network:2.4
Redhat » Jboss Operations Network » Version: 2.4.1

cpe:2.3:a:redhat:jboss_operations_network:2.4.1
Redhat » Jboss Operations Network » Version: 2.4.2

cpe:2.3:a:redhat:jboss_operations_network:2.4.2
Redhat » Jboss Operations Network » Version: 3.0

cpe:2.3:a:redhat:jboss_operations_network:3.0
Redhat » Jboss Operations Network » Version: 3.0.1

cpe:2.3:a:redhat:jboss_operations_network:3.0.1
Redhat » Jboss Operations Network » Version: 3.1

cpe:2.3:a:redhat:jboss_operations_network:3.1
Redhat » Jboss Operations Network » Version: 3.1.1

cpe:2.3:a:redhat:jboss_operations_network:3.1.1
Redhat » Jboss Operations Network » Version: 3.1.2

cpe:2.3:a:redhat:jboss_operations_network:3.1.2
Redhat » Jboss Web Framework Kit » Version: 1.0.0

cpe:2.3:a:redhat:jboss_web_framework_kit:1.0.0
Redhat » Jboss Web Framework Kit » Version: 1.1.0

cpe:2.3:a:redhat:jboss_web_framework_kit:1.1.0
Redhat » Jboss Web Framework Kit » Version: 1.2.0

cpe:2.3:a:redhat:jboss_web_framework_kit:1.2.0
Redhat » Jboss Web Framework Kit » Version: 2.0.0

cpe:2.3:a:redhat:jboss_web_framework_kit:2.0.0
Redhat » Jboss Web Framework Kit » Version: 2.1.0

cpe:2.3:a:redhat:jboss_web_framework_kit:2.1.0
Redhat » Jboss Web Framework Kit » Version: 2.2.0

cpe:2.3:a:redhat:jboss_web_framework_kit:2.2.0
Redhat » Richfaces » Version: 3.1.0

cpe:2.3:a:redhat:richfaces:3.1.0
Redhat » Richfaces » Version: 3.1.1

cpe:2.3:a:redhat:richfaces:3.1.1
Redhat » Richfaces » Version: 3.1.2

cpe:2.3:a:redhat:richfaces:3.1.2
Redhat » Richfaces » Version: 3.1.3

cpe:2.3:a:redhat:richfaces:3.1.3
Redhat » Richfaces » Version: 3.1.4

cpe:2.3:a:redhat:richfaces:3.1.4
Redhat » Richfaces » Version: 3.1.5

cpe:2.3:a:redhat:richfaces:3.1.5
Redhat » Richfaces » Version: 3.1.6

cpe:2.3:a:redhat:richfaces:3.1.6
Redhat » Richfaces » Version: 3.2.0

cpe:2.3:a:redhat:richfaces:3.2.0
Redhat » Richfaces » Version: 3.2.1

cpe:2.3:a:redhat:richfaces:3.2.1
Redhat » Richfaces » Version: 3.2.2

cpe:2.3:a:redhat:richfaces:3.2.2
Redhat » Richfaces » Version: 3.3.0

cpe:2.3:a:redhat:richfaces:3.3.0
Redhat » Richfaces » Version: 3.3.1

cpe:2.3:a:redhat:richfaces:3.3.1
Redhat » Richfaces » Version: 3.3.2

cpe:2.3:a:redhat:richfaces:3.3.2
Redhat » Richfaces » Version: 3.3.3

cpe:2.3:a:redhat:richfaces:3.3.3
Redhat » Richfaces » Version: 4.0.0

cpe:2.3:a:redhat:richfaces:4.0.0
Redhat » Richfaces » Version: 4.1.0

cpe:2.3:a:redhat:richfaces:4.1.0
Redhat » Richfaces » Version: 4.2.0

cpe:2.3:a:redhat:richfaces:4.2.0
Redhat » Richfaces » Version: 4.2.1

cpe:2.3:a:redhat:richfaces:4.2.1
Redhat » Richfaces » Version: 4.2.2

cpe:2.3:a:redhat:richfaces:4.2.2
Redhat » Richfaces » Version: 4.2.3

cpe:2.3:a:redhat:richfaces:4.2.3
Redhat » Richfaces » Version: 4.3.0

cpe:2.3:a:redhat:richfaces:4.3.0
Redhat » Richfaces » Version: 4.3.1

cpe:2.3:a:redhat:richfaces:4.3.1
Redhat » Richfaces » Version: 4.5.0

cpe:2.3:a:redhat:richfaces:4.5.0
Redhat » Richfaces » Version: 5.0.0

cpe:2.3:a:redhat:richfaces:5.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2165

Products

Pricing

Contact Us