Published: 27/10/2017 Updated: 22/01/2024

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote malicious users to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache ws-xmlrpc 3.1.3

Synopsis Important: xmlrpc security update Type/Severity Security Advisory: Important Topic An update for xmlrpc is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, w ...

Synopsis Important: xmlrpc3 security update Type/Severity Security Advisory: Important Topic An update for xmlrpc3 is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, ...

Synopsis Important: rh-java-common-xmlrpc security update Type/Severity Security Advisory: Important Topic An update for rh-java-common-xmlrpc is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Sco ...

Synopsis Important: Red Hat Fuse 72 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat FuseRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which gives a de ...

Synopsis Moderate: xmlrpc security update Type/Severity Security Advisory: Moderate Topic An update for xmlrpc is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring S ...

A flaw was discovered in the Apache XML-RPC (ws-xmlrpc) library that deserializes untrusted data when enabledForExtensions setting is enabled A remote attacker could use this vulnerability to execute arbitrary code via a crafted serialized Java object in a <ex:serializable> element(CVE-2016-5003) ...

A flaw was discovered in the Apache XML-RPC (ws-xmlrpc) library that deserializes untrusted data when enabledForExtensions setting is enabled A remote attacker could use this vulnerability to execute arbitrary code via a crafted serialized Java object in a <ex:serializable> element ...

oss-sec mailing list archives   By Date By Thread </form>    RE: [CVE-2019-17570] xmlrpc-common untrusted deserialization   From: < ...

oss-sec mailing list archives   By Date By Thread </form>    [CVE-2019-17570] xmlrpc-common untrusted deserialization   From: <cert ...

CWE-502 https://exchange.xforce.ibmcloud.com/vulnerabilities/115043 https://0ang3el.blogspot.ru/2016/07/beware-of-ws-xmlrpc-library-in-your.html http://www.securitytracker.com/id/1036294 http://www.securityfocus.com/bid/91736 http://www.openwall.com/lists/oss-security/2016/07/12/5 http://www.securityfocus.com/bid/91738 https://access.redhat.com/errata/RHSA-2018:1780 https://access.redhat.com/errata/RHSA-2018:1779 https://access.redhat.com/errata/RHSA-2018:1784 https://access.redhat.com/errata/RHSA-2018:2317 https://access.redhat.com/errata/RHSA-2018:3768 http://www.openwall.com/lists/oss-security/2020/01/16/1 http://www.openwall.com/lists/oss-security/2020/01/24/2 https://security.gentoo.org/glsa/202401-26 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2018:1780 https://alas.aws.amazon.com/AL2/ALAS-2018-1041.html

CVE-2016-5003

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect