Design/Logic Flaw

2017-06-0818:29:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.1%

JSON

The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload.

CPENameOperatorVersion
jboss_enterprise_application_platformeq5.1.2
jboss_enterprise_application_platformeq4.3.0
jboss_enterprise_application_platformeq5.1.1
jboss_enterprise_application_platformeq5.1.0
jboss_enterprise_application_platformeq5.2.0
jboss_enterprise_application_platformeq4.2.0
jboss_enterprise_application_platformeq5.0.0

Name	Operator	Version
jboss_enterprise_application_platform	eq	5.1.2
jboss_enterprise_application_platform	eq	4.3.0
jboss_enterprise_application_platform	eq	5.1.1
jboss_enterprise_application_platform	eq	5.1.0
jboss_enterprise_application_platform	eq	5.2.0
jboss_enterprise_application_platform	eq	4.2.0
jboss_enterprise_application_platform	eq	5.0.0