CVE-2016-0779

The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object...

CVE-2016-0779

CVE-2016-0779 affects Apache TomEE, where the EjbObjectInputStream class before 1.7.4 and before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object. The vulnerability enables remote code execution (RCE) by deserializing untrusted data, with affected product...

CVE-2015-8581

CVE-2016-0779 describes a remote-code-execution vulnerability in Apache TomEE via the EjbObjectInputStream deserialization path. It affects TomEE and its 7.x line, with the vulnerability exploitable by sending a crafted serialized object that is deserialized by EjbObjectInputStream, enabling arbi...