6.8

CVE-2011-2196

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.

Data is provided by the National Vulnerability Database (NVD)
Redhat ≫ Jboss Enterprise Application Platform Version4.3.0 Updatecp09
Redhat ≫ Jboss Enterprise Soa Platform Version4.3.0 Updatecp05
Redhat ≫ Jboss Seam 2 Framework Version <= 2.2.2
Redhat ≫ Jboss Seam 2 Framework Version2.0.0 Updatebeta1
Redhat ≫ Jboss Seam 2 Framework Version2.0.0 Updatecr1
Redhat ≫ Jboss Seam 2 Framework Version2.0.0 Updatecr2
Redhat ≫ Jboss Seam 2 Framework Version2.0.0 Updatecr3
Redhat ≫ Jboss Seam 2 Framework Version2.0.0 Updatega
Redhat ≫ Jboss Seam 2 Framework Version2.0.1 Updatecr1
Redhat ≫ Jboss Seam 2 Framework Version2.0.1 Updatecr2
Redhat ≫ Jboss Seam 2 Framework Version2.0.1 Updatega
Redhat ≫ Jboss Seam 2 Framework Version2.0.2 Updatecr1
Redhat ≫ Jboss Seam 2 Framework Version2.0.2 Updatecr2
Redhat ≫ Jboss Seam 2 Framework Version2.0.2 Updatega
Redhat ≫ Jboss Seam 2 Framework Version2.0.2 Updatesp1
Redhat ≫ Jboss Seam 2 Framework Version2.0.3 Updatecr1
Redhat ≫ Jboss Seam 2 Framework Version2.1.0 Updatealpha1
Redhat ≫ Jboss Seam 2 Framework Version2.1.0 Updatebeta1
Redhat ≫ Jboss Seam 2 Framework Version2.1.0 Updatecr1
Redhat ≫ Jboss Seam 2 Framework Version2.1.0 Updatega
Redhat ≫ Jboss Seam 2 Framework Version2.1.0 Updatesp1
Redhat ≫ Jboss Seam 2 Framework Version2.1.1 Updatecr1
Redhat ≫ Jboss Seam 2 Framework Version2.1.1 Updatecr2
Redhat ≫ Jboss Seam 2 Framework Version2.1.1 Updatega
Redhat ≫ Jboss Seam 2 Framework Version2.1.2
Redhat ≫ Jboss Seam 2 Framework Version2.1.2 Updatecr1
Redhat ≫ Jboss Seam 2 Framework Version2.1.2 Updatecr2
Redhat ≫ Jboss Seam 2 Framework Version2.2.0 Updatecr1
Redhat ≫ Jboss Seam 2 Framework Version2.2.0 Updatega
Redhat ≫ Jboss Seam 2 Framework Version2.2.1
Redhat ≫ Jboss Seam 2 Framework Version2.2.1 Updatecr1
Redhat ≫ Jboss Seam 2 Framework Version2.2.1 Updatecr2
Redhat ≫ Jboss Seam 2 Framework Version2.2.1 Updatecr3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.22% 0.781
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P