Vulnerabilities

TI-2024-31372 CVE-2024-46983 · GHSA-c459-2m73-67hj

Remote Command Execution(RCE) Vulnerbility in sofa-hessian

MEDIUM 50

sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00678 Published 2024-09-19 Fixed in 3.5.5 CWE-74

TI-2024-15655 CVE-2024-23636 · GHSA-7q8p-9953-pxvr

MEDIUM 50

SOFARPC is a Java RPC framework.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00799 Published 2024-01-23 Fixed in 5.12.0 CWE-502

TI-2023-21931 CVE-2023-41331

MEDIUM 52

SOFARPC is a Java RPC framework.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01635 Published 2023-09-12 Fixed in 5.11.0 CWE-917