CVE-2023-28462

creationtimestamp| type| source ---|---|--- 2023-03-31 00:21:39+00:00| seen| https://t.me/cibsecurity/61203 2025-02-18 21:11:32+00:00| seen| Telegram/pKfjSAyyTdwmZfChAnq36ApmbNun7kQI1v0mjijJffa5Rie6 2026-06-23 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moxv6xvire23...

CVE-2023-28462

A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 Enterprise, 5.20.0 and newer Enterprise, and 5.2020.1 and newer Community, when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed...

CVE-2023-28462

The CVE describes a JNDI rebind vulnerability in Payara Server: when running Java 1.8u181 or earlier, the default ORB listener can be exploited by performing a JNDI directory scan to load malicious code on the server. Affected products include Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newe...