Vulnerability Details CVE-2022-40609
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236069.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.3%
CVSS Severity
CVSS v3 Score 8.1
References
Products affected by CVE-2022-40609
-
cpe:2.3:a:ibm:sdk:6.0
-
cpe:2.3:a:ibm:sdk:7.0
-
cpe:2.3:a:ibm:sdk:7.0.0.0
-
cpe:2.3:a:ibm:sdk:7.0.10.55
-
cpe:2.3:a:ibm:sdk:7.1.0.0
-
cpe:2.3:a:ibm:sdk:7.1.4.55
-
cpe:2.3:a:ibm:sdk:7.1.5.18
-
cpe:2.3:a:ibm:sdk:8.0
-
cpe:2.3:a:ibm:sdk:8.0.0.0
-
cpe:2.3:a:ibm:sdk:8.0.6.0
-
cpe:2.3:a:ibm:sdk:8.0.8.0