sofastack

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

sofastack records in CISA KEV

No sofastack vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2023-21931 CVE-2023-41331

MEDIUM 52

SOFARPC is a Java RPC framework.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01635 Published 2023-09-12 Fixed in 5.11.0 CWE-917

TI-2024-31372 CVE-2024-46983 · GHSA-c459-2m73-67hj

MEDIUM 50

sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00678 Published 2024-09-19 Fixed in 3.5.5 CWE-74

TI-2024-15655 CVE-2024-23636 · GHSA-7q8p-9953-pxvr

MEDIUM 50

SOFARPC is a Java RPC framework.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00799 Published 2024-01-23 Fixed in 5.12.0 CWE-502