Vulnerability Details CVE-2016-7065
The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.072
EPSS Ranking 91.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
- http://seclists.org/fulldisclosure/2016/Nov/143
- http://www.securityfocus.com/bid/93462
- https://bugzilla.redhat.com/show_bug.cgi?id=1382534
- https://www.exploit-db.com/exploits/40842/
- http://seclists.org/fulldisclosure/2016/Nov/143
- http://www.securityfocus.com/bid/93462
- https://bugzilla.redhat.com/show_bug.cgi?id=1382534
- https://www.exploit-db.com/exploits/40842/
Products affected by CVE-2016-7065
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.0.0
-
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0