Jython Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Jython Project records in CISA KEV

No Jython Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jython 2 records MEDIUM

Records

2 records in Jython · all components

TI-2016-03401 CVE-2016-4000 · GHSA-6r7r-jj8h-pq6v

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

MEDIUM 51

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06206 Published 2017-07-06 Partial fix · 2.7.1b3 CWE-502

TI-2013-01798 CVE-2013-2027 · GHSA-9347-9w64-q5wp

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which…

LOW 22

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00429 Published 2015-02-13 Partial fix · 2.7.2b3 CWE-264

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0