CVE-2016-9585
MEDIUMRedhat Jboss Enterprise Application P... - Insecure Deserialization
Title source: ruleDescription
Red Hat JBoss EAP version 5 is vulnerable to a deserialization of untrusted data in the JMX endpoint when deserializes the credentials passed to it. An attacker could exploit this vulnerability resulting in a denial of service attack.
Scores
CVSS v3
5.3
EPSS
0.0018
EPSS Percentile
39.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (1)
redhat/jboss_enterprise_application_platform
Timeline
Published
Mar 09, 2018
Tracked Since
Feb 18, 2026