Vulnerability-Lookup

CVE-2015-0279 (GCVE-0-2015-0279)

Vulnerability from cvelistv5 – Published: 2015-03-26 14:00 – Updated: 2024-08-06 04:03

ENISA

Summary

JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1111 records in the last 180 days details

References

8 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1192140	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0719.html	vendor-advisoryx_refsource_REDHAT
http://jvn.jp/en/jp/JVN56297719/index.html	third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-0…	third-party-advisoryx_refsource_JVNDB
http://seclists.org/fulldisclosure/2019/Jul/21	mailing-listx_refsource_FULLDISC
http://packetstormsecurity.com/files/153734/Tufin…	x_refsource_MISC
http://packetstormsecurity.com/files/156663/Richs…	x_refsource_MISC
http://seclists.org/fulldisclosure/2020/Mar/21	mailing-listx_refsource_FULLDISC

Date Public

2015-03-24 00:00

ENISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 45b08516-21cd-4a31-a665-db852c2639c5

Vulnerability ID: CVE-2015-0279

Status: Confirmed

Status Updated: 2026-10-25 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2026-10-25

Asserted: 2026-10-25

Scope

Notes: Affected: Red Hat / JBoss RichFaces | Description: JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter. | Patched since: 2015/03/24 | Exploitation type: unknown | CWEs: CWE-95 | Origin source: CNW

Evidence

Type: Csirt Report

Signal: Successful Exploitation

Confidence: 75%

Source: enisa-cnw-kev

Details

Cwes	CWE-95
Euvd	EUVD-2015-0292
Notes
Catalog	ENISA / EU CSIRTs Network (CNW) KEV JSON
Product	JBoss RichFaces
Datereported	2026/10/25
Originsource	CNW
Patchedsince	2015/03/24
Vendorproject	Red Hat
Exploitationtype	unknown
Vulnerabilityname
Threatactorsexploiting

References

Created: 2026-11-04 13:00 UTC | Updated: 2026-11-04 13:00 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.884Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
          },
          {
            "name": "RHSA-2015:0719",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
          },
          {
            "name": "JVN#56297719",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
          },
          {
            "name": "JVNDB-2015-001959",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
          },
          {
            "name": "20190723 Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE)",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
          },
          {
            "name": "20200313 RichFaces exploitation toolkit",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-03-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-14T00:06:02.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
        },
        {
          "name": "RHSA-2015:0719",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
        },
        {
          "name": "JVN#56297719",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
        },
        {
          "name": "JVNDB-2015-001959",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
        },
        {
          "name": "20190723 Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE)",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
        },
        {
          "name": "20200313 RichFaces exploitation toolkit",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0279",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
            },
            {
              "name": "RHSA-2015:0719",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
            },
            {
              "name": "JVN#56297719",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
            },
            {
              "name": "JVNDB-2015-001959",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
            },
            {
              "name": "20190723 Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE)",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
            },
            {
              "name": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
            },
            {
              "name": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
            },
            {
              "name": "20200313 RichFaces exploitation toolkit",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0279",
    "datePublished": "2015-03-26T14:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.884Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2015-0279",
      "date": "2026-11-05",
      "epss": "0.03929",
      "percentile": "0.90404"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:redhat:richfaces:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "DF2058B7-E4C6-4759-89F4-BBF0180CDA69",
                  "versionEndIncluding": "4.5.4",
                  "versionStartIncluding": "4.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter."
        },
        {
          "lang": "es",
          "value": "JBoss RichFaces anterior a 4.5.4 permite a atacantes remotos inyectar expresiones del lenguaje de expresiones (EL) y ejecutar c\u00f3digo Java arbitrario a trav\u00e9s del par\u00e1metro do."
        }
      ],
      "id": "CVE-2015-0279",
      "lastModified": "2024-11-21T02:22:42.980",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 6.8,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 8.6,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2015-03-26T14:59:00.070",
      "references": [
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Broken Link",
            "Vendor Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Issue Tracking",
            "Vendor Advisory"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Broken Link",
            "Vendor Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Issue Tracking",
            "Vendor Advisory"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
        }
      ],
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-94"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:redhat:richfaces:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DF2058B7-E4C6-4759-89F4-BBF0180CDA69",
                    "versionEndIncluding": "4.5.4",
                    "versionStartIncluding": "4.0.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter."
          },
          {
            "lang": "es",
            "value": "JBoss RichFaces anterior a 4.5.4 permite a atacantes remotos inyectar expresiones del lenguaje de expresiones (EL) y ejecutar c\u00f3digo Java arbitrario a trav\u00e9s del par\u00e1metro do."
          }
        ],
        "id": "CVE-2015-0279",
        "lastModified": "2026-05-06T22:30:45.220",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.8,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2015-03-26T14:59:00.070",
        "references": [
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Broken Link",
              "Vendor Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Issue Tracking",
              "Vendor Advisory"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Broken Link",
              "Vendor Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Issue Tracking",
              "Vendor Advisory"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-94"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-11-04T20:11:19+00:00",
      "cve": "CVE-2015-0279",
      "id": "CVE-2015-0279",
      "initial_release_date": "2015-03-24T00:00:00+00:00",
      "product_status:fixed": "1",
      "product_status:known_affected": "4",
      "product_status:known_not_affected": "3",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "RichFaces: Remote Command Execution via insufficient EL parameter sanitization",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-0279.json",
      "version": "3"
    }
  }
}

CERTFR-2020-AVI-384

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Elles permettent à un attaquant de provoquer un contournement de la politique de sécurité, une atteinte à l'intégrité des données et une injection de code indirecte à distance (XSS).

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Fortinet	FortiDeceptor	FortiDeceptor versions antérieures à 3.1.0
Fortinet	N/A	FortiWLC versions antérieures à 8.5.2
Fortinet	FortiSIEM	FortiSIEM versions antérieures à 5.3.0

References

Title

Publication Time

CERTFR-2020-AVI-384

Vulnerability from certfr_avis - Published: - Updated:

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Fortinet	FortiDeceptor	FortiDeceptor versions antérieures à 3.1.0
Fortinet	N/A	FortiWLC versions antérieures à 8.5.2
Fortinet	FortiSIEM	FortiSIEM versions antérieures à 5.3.0

References

Title

Publication Time

CNVD-2015-02050

Vulnerability from cnvd - Published: 2015-03-31

Title

JBoss RichFaces任意代码执行漏洞

Description

JBoss RichFaces是一个具有Ajax和JSF特性的Web框架。 JBoss RichFaces处理do参数存在安全漏洞，允许攻击者利用漏洞注入EL表达并执行任意java代码。

Severity

中

Patch Name

JBoss RichFaces任意代码执行漏洞的补丁

Patch Description

JBoss RichFaces是一个具有Ajax和JSF特性的Web框架。JBoss RichFaces处理do参数存在安全漏洞，允许攻击者利用漏洞注入EL表达并执行任意java代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://rhn.redhat.com/errata/RHSA-2015-0719.html

Reference

https://bugzilla.redhat.com/show_bug.cgi?id=1192140

Impacted products

Name
Red Hat JBoss RichFaces <4.5.4

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-0279"
    }
  },
  "description": "JBoss RichFaces\u662f\u4e00\u4e2a\u5177\u6709Ajax\u548cJSF\u7279\u6027\u7684Web\u6846\u67b6\u3002\r\n\r\nJBoss RichFaces\u5904\u7406do\u53c2\u6570\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u6ce8\u5165EL\u8868\u8fbe\u5e76\u6267\u884c\u4efb\u610fjava\u4ee3\u7801\u3002",
  "discovererName": "Red Hat",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\nhttp://rhn.redhat.com/errata/RHSA-2015-0719.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-02050",
  "openTime": "2015-03-31",
  "patchDescription": "JBoss RichFaces\u662f\u4e00\u4e2a\u5177\u6709Ajax\u548cJSF\u7279\u6027\u7684Web\u6846\u67b6\u3002JBoss RichFaces\u5904\u7406do\u53c2\u6570\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u6ce8\u5165EL\u8868\u8fbe\u5e76\u6267\u884c\u4efb\u610fjava\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "JBoss RichFaces\u4efb\u610f\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Red Hat JBoss RichFaces \u003c4.5.4"
  },
  "referenceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140",
  "serverity": "\u4e2d",
  "submitTime": "2015-03-28",
  "title": "JBoss RichFaces\u4efb\u610f\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

FKIE_CVE-2015-0279

Vulnerability from fkie_nvd - Published: 2015-03-26 14:59 - Updated: 2026-06-17 00:19

ENISA

Severity

Summary

JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.

References

URL	Tags
secalert@redhat.com	http://jvn.jp/en/jp/JVN56297719/index.html	Third Party Advisory, VDB Entry
secalert@redhat.com	http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html	Third Party Advisory, VDB Entry
secalert@redhat.com	http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html
secalert@redhat.com	http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2015-0719.html	Broken Link, Vendor Advisory
secalert@redhat.com	http://seclists.org/fulldisclosure/2019/Jul/21
secalert@redhat.com	http://seclists.org/fulldisclosure/2020/Mar/21
secalert@redhat.com	https://bugzilla.redhat.com/show_bug.cgi?id=1192140	Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://jvn.jp/en/jp/JVN56297719/index.html	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html
af854a3a-2127-422b-91ae-364da2661108	http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2015-0719.html	Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2019/Jul/21
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2020/Mar/21
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/show_bug.cgi?id=1192140	Issue Tracking, Vendor Advisory

Impacted products

	Vendor	Product	Version
	redhat	richfaces	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:richfaces:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF2058B7-E4C6-4759-89F4-BBF0180CDA69",
              "versionEndIncluding": "4.5.4",
              "versionStartIncluding": "4.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter."
    },
    {
      "lang": "es",
      "value": "JBoss RichFaces anterior a 4.5.4 permite a atacantes remotos inyectar expresiones del lenguaje de expresiones (EL) y ejecutar c\u00f3digo Java arbitrario a trav\u00e9s del par\u00e1metro do."
    }
  ],
  "id": "CVE-2015-0279",
  "lastModified": "2026-06-17T00:19:53.980",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2015-03-26T14:59:00.070",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Broken Link",
        "Vendor Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Vendor Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-8CC3-P77G-5PCC

Vulnerability from github – Published: 2022-05-14 00:55 – Updated: 2022-05-14 00:55

Details

JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2015-0279"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-94"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2015-03-26T14:59:00Z",
    "severity": "MODERATE"
  },
  "details": "JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.",
  "id": "GHSA-8cc3-p77g-5pcc",
  "modified": "2022-05-14T00:55:57Z",
  "published": "2022-05-14T00:55:57Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0279"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
    },
    {
      "type": "WEB",
      "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
    },
    {
      "type": "WEB",
      "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2015-0279

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.

Aliases

CVE-2015-0279

Aliases

CVE-2015-0279

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2015-0279",
    "description": "JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.",
    "id": "GSD-2015-0279",
    "references": [
      "https://access.redhat.com/errata/RHSA-2015:0719",
      "https://packetstormsecurity.com/files/cve/CVE-2015-0279"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-0279"
      ],
      "details": "JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.",
      "id": "GSD-2015-0279",
      "modified": "2023-12-13T01:19:58.325122Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2015-0279",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
          },
          {
            "name": "RHSA-2015:0719",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
          },
          {
            "name": "JVN#56297719",
            "refsource": "JVN",
            "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
          },
          {
            "name": "JVNDB-2015-001959",
            "refsource": "JVNDB",
            "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
          },
          {
            "name": "20190723 Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE)",
            "refsource": "FULLDISC",
            "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
          },
          {
            "name": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
          },
          {
            "name": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
          },
          {
            "name": "20200313 RichFaces exploitation toolkit",
            "refsource": "FULLDISC",
            "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:richfaces:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.5.4",
                "versionStartIncluding": "4.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0279"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-94"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Vendor Advisory"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1192140"
            },
            {
              "name": "RHSA-2015:0719",
              "refsource": "REDHAT",
              "tags": [
                "Broken Link",
                "Vendor Advisory"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0719.html"
            },
            {
              "name": "JVNDB-2015-001959",
              "refsource": "JVNDB",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html"
            },
            {
              "name": "JVN#56297719",
              "refsource": "JVN",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://jvn.jp/en/jp/JVN56297719/index.html"
            },
            {
              "name": "20190723 Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE)",
              "refsource": "FULLDISC",
              "tags": [],
              "url": "http://seclists.org/fulldisclosure/2019/Jul/21"
            },
            {
              "name": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html"
            },
            {
              "name": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html"
            },
            {
              "name": "20200313 RichFaces exploitation toolkit",
              "refsource": "FULLDISC",
              "tags": [],
              "url": "http://seclists.org/fulldisclosure/2020/Mar/21"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2019-07-23T20:15Z",
      "publishedDate": "2015-03-26T14:59Z"
    }
  }
}

JVNDB-2015-001959

Vulnerability from jvndb - Published: 2015-04-14 04:24 - Updated:2015-04-14 04:24

Severity

N/A (UNKNOWN) - -

Summary

JBoss RichFaces vulnerable to remote Java code execution

Details

JBoss RichFaces contains a remote Java code execution vulnerability. JBoss RichFaces is an Ajax-enabled component library for JavaServer Faces (JSF). JBoss RichFaces contains a flaw in parsing the do parameter, which may result in arbitrary Java code execution. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

References

Type

URL

	JVN	http://jvn.jp/en/jp/JVN56297719/index.html
	CVE	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0279
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0279
	IPA SECURITY ALERTS	http://www.ipa.go.jp/security/ciadr/vul/20150414-jvn.html
	Code Injection(CWE-94)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

Red Hat, Inc.

JBoss RichFaces

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html",
  "dc:date": "2015-04-14T13:24+09:00",
  "dcterms:issued": "2015-04-14T13:24+09:00",
  "dcterms:modified": "2015-04-14T13:24+09:00",
  "description": "JBoss RichFaces contains a remote Java code execution vulnerability.\r\n\r\nJBoss RichFaces is an Ajax-enabled component library for JavaServer Faces (JSF). JBoss RichFaces contains a flaw in parsing the do parameter, which may result in arbitrary Java code execution.\r\n\r\nTakeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.\r\n JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html",
  "sec:cpe": {
    "#text": "cpe:/a:redhat:richfaces",
    "@product": "JBoss RichFaces",
    "@vendor": "Red Hat, Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "7.5",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2015-001959",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN56297719/index.html",
      "@id": "JVN#56297719",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0279",
      "@id": "CVE-2015-0279",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0279",
      "@id": "CVE-2015-0279",
      "@source": "NVD"
    },
    {
      "#text": "http://www.ipa.go.jp/security/ciadr/vul/20150414-jvn.html",
      "@id": "Security Alert for Vulnerability in JBoss RichFaces (JVN#56297719)",
      "@source": "IPA SECURITY ALERTS"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-94",
      "@title": "Code Injection(CWE-94)"
    }
  ],
  "title": "JBoss RichFaces vulnerable to remote Java code execution"
}

RHSA-2015:0719

Vulnerability from csaf_redhat - Published: 2015-03-24 21:06 - Updated: 2026-11-05 05:31

Summary

Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.7.0 security update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2015-0279.

CVE-2015-0279

It was found that the 'do' parameter permitted expression language (EL) injection, which could allow a remote attacker to execute Java methods on an affected server.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 1 product

https://access.redhat.com/errata/RHSA-2015:0719

Open the full advisory

RHSA-2015_0719

Vulnerability from csaf_redhat - Published: 2015-03-24 21:06 - Updated: 2024-11-22 09:01

Summary

Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.7.0 security update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2015-0279.

CVE-2015-0279

It was found that the 'do' parameter permitted expression language (EL) injection, which could allow a remote attacker to execute Java methods on an affected server.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 1 product

https://access.redhat.com/errata/RHSA-2015:0719

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2015-0279 (GCVE-0-2015-0279)

ENISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Csirt Report Successful Exploitation Confidence: 75% Source: enisa-cnw-kev

Details

References

Solution

Solution

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour