RCE (Remote Code Execution) c3p0 Dependency in Crowd Data Center

🗓️ 25 Jun 2026 09:33:25Reported by security-metrics-botType

High severity remote code execution in Crowd Data Center due to c3p0 vulnerability; upgrade to fixed versions.

Reporter	Title	Published	Views	Family All 58
IBM Security Bulletins	Security Bulletin: Due to the use of c3p0, IBM webMethods BPM is vulnerable to attack via maliciously crafted Java-serialized objects (CVE-2026-27830)	26 May 202617:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses c3p0-0.11.2.jar and mchange-commons-java-0.3.2.jar which are vulnerable to CVE-2026-27830 and CVE-2026-27727.	30 Mar 202607:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.	7 Apr 202616:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in node-tar affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:11	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Control of Generation of Code ('Code Injection') (CVE-2026-27830)	16 Jun 202617:02	–	ibm
ATTACKERKB	CVE-2026-27830	26 Feb 202600:45	–	attackerkb
Chainguard	CVE-2026-27830 vulnerabilities	27 Feb 202607:17	–	cgr
Circl	CVE-2026-27830	26 Feb 202602:30	–	circl
CNNVD	c3p0 代码问题漏洞	26 Feb 202600:00	–	cnnvd
Atlassian	RCE (Remote Code Execution) at c3p0 dependency in Crucible Server	14 Apr 202604:29	–	atlassian