Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2023-38264
HistoryMay 10, 2024 - 8:27 a.m.

CVE-2023-38264

2024-05-1008:27:44
redhat.com
access.redhat.com
19
ibm
java technology edition
object request broker
denial of service
jep 290
maxref
maxdepth
deserialization filters
security vulnerability

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The IBM SDK, Java Technology Edition’s Object Request Broker (ORB) is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters.

Related

cve 1
nvd 1
cvelist 1
ibm 14
vulnrichment 1
nessus 4
aix 1
cve
cve
CVE-2023-38264
2024-05-14 13:21:29
nvd
nvd
CVE-2023-38264
2024-05-14 13:21:29
cvelist
cvelist
CVE-2023-38264 IBM SDK, Java Technology Edition denial of service
2024-05-10 17:21:51
ibm
ibm
Security Bulletin: Maximo Asset Management: IBM SDK, Java Technology Edition Quarterly CPU - Apr 2024 - Includes Oracle April 2024 CPU plus CVE-2023-38264
2024-05-31 14:39:53
Security Bulletin: IBM Integration Designer is vulnerable to a denial of service (CVE-2023-38264)
2024-05-17 20:57:35
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX
2024-06-24 22:04:45
vulnrichment
vulnrichment
CVE-2023-38264 IBM SDK, Java Technology Edition denial of service
2024-05-10 17:21:51
nessus
nessus
RHEL 8 : java-1.8.0-ibm (RHSA-2024:3685)
2024-06-06 00:00:00
IBM Java 7.1 < 7.1.5.22 / 8.0 < 8.0.8.25 Multiple Vulnerabilities
2024-05-09 00:00:00
RHEL 7 : ibm_jdk (Unpatched Vulnerability)
2024-05-11 00:00:00
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2024-06-24 15:10:30

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON
Related for RH:CVE-2023-38264
cve1nvd1cvelist1ibm14vulnrichment1nessus4aix1