CVE-2016-7065

Опубликовано: 13 окт. 2016

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Средний

Описание

The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.

Ссылки

http://seclists.org/fulldisclosure/2016/Nov/143
http://www.securityfocus.com/bid/93462
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1382534
Issue Tracking
Vendor Advisory
https://www.exploit-db.com/exploits/40842/
http://seclists.org/fulldisclosure/2016/Nov/143
http://www.securityfocus.com/bid/93462
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1382534
Issue Tracking
Vendor Advisory
https://www.exploit-db.com/exploits/40842/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12098

Средний

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-502

Связанные уязвимости

CVE-2016-7065

CVSS3: 8

redhat

больше 9 лет назад

GHSA-4pfh-2w89-vqv4