Soffid

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Soffid records in CISA KEV

No Soffid vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Iam 1 record MEDIUM

Records

1 record in Iam · all components

TI-2017-06787 CVE-2017-9363 · GHSA-2vfp-x8jm-58cj

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers…

MEDIUM 48

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03291 Published 2017-06-02 No fix listed CWE-502

Open these records in search →

Critical	1
High	0
Medium	0
Low	1
No CVSS	0