Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-14707
HistoryJan 27, 2022 - 12:00 a.m.

Apache Karaf code issue vulnerability (CNVD-2022-14707)

2022-01-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
apache karaf
osgi container
code issue
vulnerability
insecure input validation
serialized data
remote attacker
arbitrary code
target system

EPSS

0.003

Percentile

70.2%

Apache Karaf is a lightweight OSGi (Java Dynamic Modular System) container for deploying applications and components from the Apache Foundation, U.S. A code issue vulnerability exists in Apache Karaf, which stems from insecure input validation when handling serialized data, and could be exploited by a remote attacker to pass specially crafted data to an application and execute arbitrary code on the target system.

EPSS

0.003

Percentile

70.2%