Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p7p5-3hmf-xx69

Опубликовано: 14 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.

The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.

EPSS

Процентиль: 25%
0.00086
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 5.9
redhat
больше 1 года назад

The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.

CVSS3: 5.9
nvd
больше 1 года назад

The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.

suse-cvrf
больше 1 года назад

Security update for java-1_8_0-ibm

suse-cvrf
больше 1 года назад

Security update for java-1_8_0-ibm

EPSS

Процентиль: 25%
0.00086
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-502