Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-12835

Опубликовано: 20 мая 2020
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Средний

Описание

An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into the communication, resulting in remote code execution in the context of a client-side Network Licensing Protocol component.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:smartbear:readyapi:3.2.5:*:*:*:*:*:*:*

EPSS

Процентиль: 95%
0.1649
Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-502

Связанные уязвимости

github
больше 3 лет назад

An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into the communication, resulting in remote code execution in the context of a client-side Network Licensing Protocol component.

EPSS

Процентиль: 95%
0.1649
Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-502