Red Hat Security Advisory

RHSA-2018:2317

xmlrpc security update

Released 2018-07-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Tools for RHV Engine xmlrpc-1:3.1.3-9.el7_5, xmlrpc-client-1:3.1.3-9.el7_5, xmlrpc-common-1:3.1.3-9.el7_5 +2

Fixes 1 record

TI-2016-04323 CVE-2016-5003 · GHSA-4gqp-296r-j5mq

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows…

MEDIUM 58

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.14876 Published 2017-10-27 Partial fix CWE-502