Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-17564

Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue affected Apache Dubbo 2.7.0 to 2.7.4, 2.6.0 to 2.6.7, and all 2.5.x versions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.933
EPSS Ranking 99.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 6.8
Products affected by CVE-2019-17564
  • Apache » Dubbo » Version: 2.5.0
    cpe:2.3:a:apache:dubbo:2.5.0
  • Apache » Dubbo » Version: 2.5.1
    cpe:2.3:a:apache:dubbo:2.5.1
  • Apache » Dubbo » Version: 2.5.10
    cpe:2.3:a:apache:dubbo:2.5.10
  • Apache » Dubbo » Version: 2.5.2
    cpe:2.3:a:apache:dubbo:2.5.2
  • Apache » Dubbo » Version: 2.5.3
    cpe:2.3:a:apache:dubbo:2.5.3
  • Apache » Dubbo » Version: 2.5.4
    cpe:2.3:a:apache:dubbo:2.5.4
  • Apache » Dubbo » Version: 2.5.5
    cpe:2.3:a:apache:dubbo:2.5.5
  • Apache » Dubbo » Version: 2.5.6
    cpe:2.3:a:apache:dubbo:2.5.6
  • Apache » Dubbo » Version: 2.5.7
    cpe:2.3:a:apache:dubbo:2.5.7
  • Apache » Dubbo » Version: 2.5.8
    cpe:2.3:a:apache:dubbo:2.5.8
  • Apache » Dubbo » Version: 2.5.9
    cpe:2.3:a:apache:dubbo:2.5.9
  • Apache » Dubbo » Version: 2.6.0
    cpe:2.3:a:apache:dubbo:2.6.0
  • Apache » Dubbo » Version: 2.6.1
    cpe:2.3:a:apache:dubbo:2.6.1
  • Apache » Dubbo » Version: 2.6.2
    cpe:2.3:a:apache:dubbo:2.6.2
  • Apache » Dubbo » Version: 2.6.3
    cpe:2.3:a:apache:dubbo:2.6.3
  • Apache » Dubbo » Version: 2.6.4
    cpe:2.3:a:apache:dubbo:2.6.4
  • Apache » Dubbo » Version: 2.6.5
    cpe:2.3:a:apache:dubbo:2.6.5
  • Apache » Dubbo » Version: 2.6.6
    cpe:2.3:a:apache:dubbo:2.6.6
  • Apache » Dubbo » Version: 2.6.7
    cpe:2.3:a:apache:dubbo:2.6.7
  • Apache » Dubbo » Version: 2.7.0
    cpe:2.3:a:apache:dubbo:2.7.0
  • Apache » Dubbo » Version: 2.7.1
    cpe:2.3:a:apache:dubbo:2.7.1
  • Apache » Dubbo » Version: 2.7.2
    cpe:2.3:a:apache:dubbo:2.7.2
  • Apache » Dubbo » Version: 2.7.3
    cpe:2.3:a:apache:dubbo:2.7.3
  • Apache » Dubbo » Version: 2.7.4
    cpe:2.3:a:apache:dubbo:2.7.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved