TI-2024-31372 CVE-2024-46983 · GHSA-c459-2m73-67hj
Remote Command Execution(RCE) Vulnerbility in sofa-hessian
Priority MEDIUM 50
sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd.
Antfin
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Antfin records in CISA KEVNo Antfin vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2019-06668 CVE-2019-9212 · GHSA-pfwp-8pq4-g7pv
SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a…
Priority MEDIUM 47
SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.internal.objects.XStri…