Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2023/03/30 9:30 p.m.•37 views

Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed

A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 Enterprise, 5.20.0 and newer Enterprise, and 5.2020.1 and newer Community, when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed...

9.8CVSS8.9AI score0.00938EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2023/03/30 9:30 p.m.•62 views

GHSA-XC93-587G-MXM7 Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed

A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 Enterprise, 5.20.0 and newer Enterprise, and 5.2020.1 and newer Community, when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed...

9.8CVSS9.5AI score0.00938EPSS
SaveExploits0References3
NVD
NVD
•added 2023/03/30 8:15 p.m.•36 views

CVE-2023-28462

A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 Enterprise, 5.20.0 and newer Enterprise, and 5.2020.1 and newer Community, when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed...

9.8CVSS9.5AI score0.00938EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/30 12:00 a.m.•2 views

CVE-2023-28462: Deserialization of Untrusted Data

A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 Enterprise, 5.20.0 and newer Enterprise, and 5.2020.1 and newer Community, when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed...

9.8CVSS5.8AI score0.00938EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/03/30 12:00 a.m.•43 views

CVE-2023-28462

A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 Enterprise, 5.20.0 and newer Enterprise, and 5.2020.1 and newer Community, when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed...

9.7AI score0.00938EPSS
SaveExploits0References1
Rows per page
Query Builder