CVE-2025-34393

Barracuda Service Center (RMM solution) before 2025.1.1 is affected. The root cause is improper validation of the name of an attacker-controlled WSDL service, enabling insecure reflection that can lead to remote code execution via invocation of arbitrary methods or deserialization of untrusted ty...

CVE-2025-34393: Use of Externally-Controlled Input to Select Classes or Code

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or...

PT-2025-50336

Name of the Vulnerable Software and Affected Versions Barracuda Service Center versions prior to 2025.1.1 Description The Barracuda Service Center, within the RMM solution, improperly validates the name of a WSDL service controlled by an attacker. This insecure reflection can lead to remote code...

Oracle WebLogic wls_utc wsdl service suffers from an xml entity injection vulnerability.

WebLogic is the United States Oracle Corporation produced a middleware based on the JAVAEE architecture , is used to develop , integrate , deploy and manage large-scale distributed Web applications , network applications and database applications of Java application servers . An xml entity...