What’s Vulnerable › Vulnerabilities

CVE-2013-6448

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-01-23 · updated 2026-06-17
• Weakness: CWE-264

Description

The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allows remote attackers to bypass the WebRemote annotation restriction and obtain information about arbitrary classes and methods on the server classpath via unspecified vectors.

Affected products

• RedHat Jboss Seam 2 Framework: through 2.3.1; 2.0.0-beta1, 2.0.0-cr1, 2.0.0-cr2, 2.0.0-cr3, 2.0.0-ga, 2.0.1-cr1 (+31)

References

• http://rhn.redhat.com/errata/RHSA-2014-0045.html
• http://secunia.com/advisories/56572
• http://www.securitytracker.com/id/1029652
• https://bugzilla.redhat.com/show_bug.cgi?id=1044794
• https://github.com/seam2/jboss-seam/commit/090aa6252affc978a96c388e3fc2c1c2688d9bb5
• http://rhn.redhat.com/errata/RHSA-2014-0045.html
• http://secunia.com/advisories/56572
• http://www.securitytracker.com/id/1029652
• https://bugzilla.redhat.com/show_bug.cgi?id=1044794
• https://github.com/seam2/jboss-seam/commit/090aa6252affc978a96c388e3fc2c1c2688d9bb5

Get alerted when CVE-2013-6448 or the next vulnerability affects your stack