Veille CVE

Novembre 2018

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2018-8581 7.4 Élevée Exploitée Rançongiciel

    Microsoft Exchange Server

    An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

  2. CVE-2018-14667 9.8 Critique Exploitée

    [UNKNOWN] RichFaces · Redhat richfaces · Redhat enterprise linux

    The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.