CVE-2018-14667
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
Published Nov 6, 2018 · updated Jun 16, 2026 · redhat richfaces
Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
Timeline
Detection, updates, and resolution for this record.
Nov 6, 2018 · Catalog
Detected
Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
Sep 28, 2023 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Oct 19, 2023 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Oct 19, 2023
Affected
- cpe redhat/enterprise linux5.0
- cpe redhat/enterprise linux6.0
- cpe redhat/richfacesversion unspecified
- vendor Red Hat JBoss RichFaces Frameworkversion unspecified
Sources
- CISA KEVCVE-2018-14667
Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
cisa.gov - CVE.orgCVE-2018-14667
Official CVE identifier
cve.org - FIRST EPSSCVE-2018-14667
30-day exploitation probability 74.2%
first.org - NIST NVDCVE-2018-14667
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserReso
nvd.nist.gov