Lucene search
Veracode Vulnerability DatabaseVERACODE:5761HistoryJan 29, 2018 - 4:55 a.m.
Remote Code Execution (RCE)
2018-01-2904:55:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.046 Low
EPSS
Percentile
92.6%
xenon-commons is vulnerable to remote code execution (RCE) attacks. These attacks are possible because inbound requests of Content-Type: kryo-octet-stream are deserialized when getBody is called. Using this flaw, unauthenticated users can execute code.
Related
nessus
nessus
VMware vRealize Automation Deserialization Vulnerability (VMSA-2018-0006)
2018-02-06 00:00:00
nvd
nvd
CVE-2017-4947
2018-01-29 16:29:00
cve
cve
CVE-2017-4947
2018-01-29 16:29:00
prion
prion
Deserialization of untrusted data
2018-01-29 16:29:00
cvelist
cvelist
CVE-2017-4947
2018-01-26 00:00:00
vmware
vmware