Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Themidnightcoders Component: Weborb For Java Clear all filters
TI-2017-02411 CVE-2017-3207 · GHSA-9258-4rxh-qw5j

Deserialization of untrusted data in Midnight Coders WebORB for Java

Priority MEDIUM 53

The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08075 Published 2018-06-11 No fix listed CWE-502