Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
- Vendor
- Red Hat
- Product
- JBoss RichFaces Framework
- CVSS
- 9.8
- EPSS (exploit probability)
- 74.2%
- Status
- kev
- CISA patch-by (BOD 22-01)
- Added to KEV
Is CVE-2018-14667 being exploited?
Yes. CISA added CVE-2018-14667 to its Known Exploited Vulnerabilities catalog on . CISA only lists a CVE when it has reliable evidence of exploitation in the wild.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 74.2% (scored October 14, 2026).
- CISA KEV[ LISTED ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-10-23. Full cross-catalog view: /kev-comparison
CVE-2018-14667 timeline
Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON
What to do
CISA required actionApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
US federal civilian agencies must remediate by (21 days after listing) under BOD 22-01. Everyone else: that deadline is a sensible upper bound, not a target. Vendor guidance and the NVD record are linked under Source above.
Other Red Hat CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-94218 Keycloak session enforcement bypass on policy upgradewrite-up | [ LOW ] | 3.1 | 0.3% | — |
| CVE-2026-94217 Keycloak UMA token endpoint resource ownership confusionwrite-up | [ LOW ] | 3.5 | 0.2% | — |
| CVE-2026-94215 Keycloak Admin REST API client cache flawwrite-up | [ MEDIUM ] | 5.5 | 0.3% | — |
| CVE-2026-94213 Keycloak authorization policy evaluation exposes permissionswrite-up | [ MEDIUM ] | 4.9 | 0.4% | — |
| CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability | [ MEDIUM ] | 6.9 | 5.0% | |
| CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability | [ HIGH ] | 7.2 | 8.5% | |
| CVE-2021-3560 Red Hat Polkit Incorrect Authorization Vulnerability | [ HIGH ] | 7.8 | 23.7% | |
| CVE-2021-4034 Red Hat Polkit Out-of-Bounds Read and Write Vulnerabilityransomware use | [ HIGH ] | 7.8 | 94.9% |