PT-2026-99804

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description An unauthenticated remote attacker can cause the deserialization of attacker-controlled bytes via the XML-RPC endpoint. This occurs because the endpoint accepts vendor extension types that are deserializ...

CVE-2016-5003

The Apache XML-RPC aka ws-xmlrpc library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an "ex:serializable" ex:serializable element...