Логотип exploitDog
bind:CVE-2016-0750
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2016-0750

Количество 3

Количество 3

redhat логотип

CVE-2016-0750

около 8 лет назад

The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.

CVSS3: 4.2
EPSS: Низкий
nvd логотип

CVE-2016-0750

больше 7 лет назад

The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.

CVSS3: 4.2
EPSS: Низкий
github логотип

GHSA-4hhg-8ghq-vwq6

больше 3 лет назад

The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2016-0750

The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.

CVSS3: 4.2
1%
Низкий
около 8 лет назад
nvd логотип
CVE-2016-0750

The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.

CVSS3: 4.2
1%
Низкий
больше 7 лет назад
github логотип
GHSA-4hhg-8ghq-vwq6

The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.

CVSS3: 8.8
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу