8.8
CVSSv3

CVE-2016-0750

Published: 11/09/2018 Updated: 07/11/2023
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

The hotrod java client in infinispan prior to 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

infinispan infinispan

Vendor Advisories

Synopsis Moderate: Red Hat Single Sign-On 721 security update Type/Severity Security Advisory: Moderate Topic Red Hat Single Sign-On 721 is now available for download from the Customer PortalRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability S ...
Synopsis Important: Red Hat JBoss Data Grid 711 security update Type/Severity Security Advisory: Important Topic Red Hat JBoss Data Grid 711 is now available for download from the Customer PortalRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabil ...
The hotrod java client in infinispan automatically deserializes bytearray message contents in certain events A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks ...