Read the docs

Yet Another Java Service Wrapper Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Yet Another Java Service Wrapper Project records in CISA KEV

No Yet Another Java Service Wrapper Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Yet Another Java Service Wrapper · all components

Priority MEDIUM 44

An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other products, allows attackers to exfiltrate data from remote hosts and potentially cause denial-of-servi…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02352 Published 2020-01-13 No fix listed CWE-611
Open these records in search →