VULNERABILITY INTELLIGENCE

CVE-2014-0248

CVSS score6.8 MEDIUM
EPSS probability3.51%
CISA KEVNot currently listed
Published2014-07-07
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote attackers to execute arbitrary code via a crafted authentication header, related to Seam logging.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references