Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35352
HistoryMay 04, 2022 - 8:44 a.m.

Remote Code Execution

2022-05-0408:44:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
ureport2-console
remote code execution
sensitive user files
deserialize
malicious database server
software

EPSS

0.003

Percentile

71.8%

com.bstek.ureport:ureport2-console is vulnerable to remote code execution. A remote attacker is able to read sensitive user files and deserialize local gadgets by connecting the system to a malicious database server.

EPSS

0.003

Percentile

71.8%

Related for VERACODE:35352