CVE-2013-6447

The CVE-2013-6447 issue affects Red Hat JBoss Web Framework Kit 2.4.0, where the seam-remoting components (ExecutionHandler, PollHandler, SubscriptionHandler) unmarshalled untrusted XML and processed external entities, enabling an attacker to read files on the server. Red Hat’s advisory RHSA-2014...

CVE-2011-1484

CVE-2011-1484 affects JBoss Seam 2 framework (2.2.x and earlier) distributed with Red Hat JBoss Enterprise platforms. The flaw stems from improper restriction of EL statements in FacesMessages during page exception handling, enabling remote code execution via a crafted URL. Red Hat advisories RHS...

CVE-2011-2196

CVE-2011-2196 affects jboss-seam.jar in JBoss Seam 2 (2.2.x and earlier) as shipped with Red Hat JBoss SOA Platform 4.3.0.CP05 and 5.1.0; JBoss EAP 4.3.0, 4.3.0.CP09, 5.1.1; and JBoss Enterprise Web Platform 5.1.1. The flaw stems from an incomplete fix for CVE-2011-1484, failing to adequately res...

CVE-2013-6448

CVE-2013-6448 affects Red Hat JBoss Web Framework Kit’s Seam Remoting component. The InterfaceGenerator handler exposed details of all classes and methods on the server classpath, enabling a remote attacker to determine which classes are deployed. Red Hat addressed this in the 2.4.0 update (RHSA-...