CVE-2016-7065
HIGH 8.8EPSS 12.5%
The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.
- CVSS v3.0
- 8.8 HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 12.47% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2016-10-13
- Updated
- 2024-08-06
Proof-of-concept exploits (1)
- EdoardoVignati/java-deserialization-of-untrusted-data-poc26★ · 2021-07-12