Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371

🗓️ 07 Sep 2020 12:58:33Reported by RedHatType 
redhat
 redhat🔗 access.redhat.com👁 3 Views

Mojarra before 2.3.14 has a path traversal flaw via loc or con parameters allowing file reads.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
FreeBSD		payara -- multiple vulnerabilities
1 Feb 201900:00
–freebsd
FreeBSD		Payara -- path trasversal flaw via either loc/con parameters in Eclipse Mojarra
13 Jan 202000:00
–freebsd
BDU FSTEC		The vulnerability of the Web Container (JavaServer Faces) component of the Oracle WebLogic Server application server allows a attacker to disclose sensitive information that is protected by security measures.
22 Jan 202000:00
–bdu_fstec
BDU FSTEC		The vulnerability of the getLocalePrefix function in ResourceManager.java of the Eclipse Mojarra library, as a implementation of EE4J Eclipse for the Jakarta Faces specification, allows an attacker to gain unauthorized access to protected information.
19 May 202300:00
–bdu_fstec
CNVD		Eclipse Mojarra Information Disclosure Vulnerability
20 Jul 201800:00
–cnvd
CNVD		Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2020-08167)
15 Jan 202000:00
–cnvd
CVE		CVE-2018-14371
18 Jul 201812:00
–cve
CVE		CVE-2020-6950
2 Jun 202115:49
–cve
Cvelist		CVE-2018-14371
18 Jul 201812:00
–cvelist
Cvelist		CVE-2020-6950
2 Jun 202115:49
–cvelist
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux7anyeap7-dom4j0:2.1.3-1.redhat_00001.1.el7eap.noarcheap7-dom4j-0:2.1.3-1.redhat_00001.1.el7eap.noarch.noarch.rpm
Red Hat Enterprise Linux7anyeap7-glassfish-jsf0:2.3.5-13.SP3_redhat_00011.1.el7eap.noarcheap7-glassfish-jsf-0:2.3.5-13.SP3_redhat_00011.1.el7eap.noarch.noarch.rpm
Red Hat Enterprise Linux7anyeap7-hal-console0:3.0.23-1.Final_redhat_00001.1.el7eap.noarcheap7-hal-console-0:3.0.23-1.Final_redhat_00001.1.el7eap.noarch.noarch.rpm
Red Hat Enterprise Linux7anyeap7-hibernate0:5.3.17-1.Final_redhat_00001.1.el7eap.noarcheap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el7eap.noarch.noarch.rpm
Red Hat Enterprise Linux7anyeap7-hibernate-core0:5.3.17-1.Final_redhat_00001.1.el7eap.noarcheap7-hibernate-core-0:5.3.17-1.Final_redhat_00001.1.el7eap.noarch.noarch.rpm
Red Hat Enterprise Linux7anyeap7-hibernate-entitymanager0:5.3.17-1.Final_redhat_00001.1.el7eap.noarcheap7-hibernate-entitymanager-0:5.3.17-1.Final_redhat_00001.1.el7eap.noarch.noarch.rpm
Red Hat Enterprise Linux7anyeap7-hibernate-envers0:5.3.17-1.Final_redhat_00001.1.el7eap.noarcheap7-hibernate-envers-0:5.3.17-1.Final_redhat_00001.1.el7eap.noarch.noarch.rpm
Red Hat Enterprise Linux7anyeap7-hibernate-java80:5.3.17-1.Final_redhat_00001.1.el7eap.noarcheap7-hibernate-java8-0:5.3.17-1.Final_redhat_00001.1.el7eap.noarch.noarch.rpm
Red Hat Enterprise Linux7anyeap7-hibernate-validator0:6.0.20-1.Final_redhat_00001.1.el7eap.noarcheap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el7eap.noarch.noarch.rpm
Red Hat Enterprise Linux7anyeap7-hibernate-validator-cdi0:6.0.20-1.Final_redhat_00001.1.el7eap.noarcheap7-hibernate-validator-cdi-0:6.0.20-1.Final_redhat_00001.1.el7eap.noarch.noarch.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
28 Jun 2026 08:53Current
7High risk
Vulners AI Score7
CVSS 25
CVSS 37.5
CVSS 3.16.5
EPSS0.10124
CWE-22
Mojarrapath traversalloc parametercon parameterarbitrary file read
3