CVE-2022-29805

2022-08-1911:40:49

mitre

www.cve.org

java deserialization

fishbowl server

remote code execution

AI Score

9.8

Confidence

High

EPSS

0.007

Percentile

80.8%

JSON

A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a crafted XML payload.

References

www.fishbowlinventory.com

www.whiteoaksecurity.com/blog/fishbowl-disclosure-cve-2022-29805/