Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-17556

Apache Olingo versions 4.0.0 to 4.6.0 provide the AbstractService class, which is public API, uses ObjectInputStream and doesn't check classes being deserialized. If an attacker can feed malicious metadata to the class, then it may result in running attacker's code in the worse case.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
Products affected by CVE-2019-17556
  • Apache » Olingo » Version: 4.0.0
    cpe:2.3:a:apache:olingo:4.0.0
  • Apache » Olingo » Version: 4.1.0
    cpe:2.3:a:apache:olingo:4.1.0
  • Apache » Olingo » Version: 4.2.0
    cpe:2.3:a:apache:olingo:4.2.0
  • Apache » Olingo » Version: 4.3.0
    cpe:2.3:a:apache:olingo:4.3.0
  • Apache » Olingo » Version: 4.4.0
    cpe:2.3:a:apache:olingo:4.4.0
  • Apache » Olingo » Version: 4.6.0
    cpe:2.3:a:apache:olingo:4.6.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved