CVE-2016-4000

CVE-2016-4000 affects Oracle Enterprise Manager Base Platform (Jython) — a remote code execution via a crafted serialized PyFunction object. The GitHub advisory GHSA-6R7R-JJ8H-PQ6V corroborates deserialization of untrusted data in Jython and references the same CVE. Tenable Nessus entries (e.g., ...

CVE-2013-2027

CVE-2013-2027 affects Jython 2.2.1, where class cache files are created with permissions from the current umask, allowing local attackers to bypass access restrictions. The IBM advisory notes potential arbitrary code execution or information disclosure and recommends upgrading to jython-standalon...