Themidnightcoders

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Themidnightcoders records in CISA KEV

No Themidnightcoders vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weborb For Java 2 records MEDIUM

Records

2 records

TI-2017-02411 CVE-2017-3207 · GHSA-9258-4rxh-qw5j

Deserialization of untrusted data in Midnight Coders WebORB for Java

MEDIUM 53

The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08075 Published 2018-06-11 No fix listed CWE-502

TI-2017-02412 CVE-2017-3208 · GHSA-q723-3768-2877

The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders…

MEDIUM 49

The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03931 Published 2018-06-11 No fix listed CWE-611

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0