openjpa: Remote arbitrary code execution by creating a serialized object and leveraging improperly secured server programs
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Fuse ESB Enterprise 7.1.0 | |||
| cpe:/a:redhat:fuse_esb_enterprise:7.1.0 | RHSA-2013:1862 | 2013-12-19T00:00:00Z | |
| Fuse Management Console 7.1.0 | |||
| cpe:/a:redhat:fuse_management_console:7.1.0 | RHSA-2013:1862 | 2013-12-19T00:00:00Z | |
| Fuse MQ Enterprise 7.1.0 | |||
| cpe:/a:redhat:fuse_mq_enterprise:7.1.0 | RHSA-2013:1862 | 2013-12-19T00:00:00Z | |
| Red Hat JBoss Fuse 6.0 | |||
| cpe:/a:redhat:jboss_fuse:6.0.0 | RHSA-2013:1185 | 2013-08-29T00:00:00Z | |
No data available yet.
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-j65f-mvgw-prp2 | Deserialization of Untrusted Data in Apache OpenJPA |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 9.5% (9.511% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.