5 matches found
CVE-2016-2510
BeanShell bsh before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler...
Xxe
BeanShell bsh before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler...
CVE-2016-2510
BeanShell bsh before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler...
CVE-2016-2510: Undefined Security Weakness
BeanShell bsh before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler...
PT-2016-5172
Name of the Vulnerable Software and Affected Versions BeanShell bsh versions prior to 2.0b6 Description The issue allows remote attackers to execute arbitrary code via crafted serialized data when BeanShell is included on the classpath by an application that uses Java serialization or XStream. Th...