CVE-2016-5003

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1600%

EPSS Percentile4.72th

Published2017年10月27日

Last Modified2026年5月13日

Vulnerability Description

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.

Affected Platforms (CPE)

📦

Apache

Ws Xmlrpc

= 3.1.3

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2016/07/12/5

🔗 http://www.openwall.com/lists/oss-security/2020/01/16/1

🔗 http://www.openwall.com/lists/oss-security/2020/01/24/2

🔗 http://www.securityfocus.com/bid/91736

🔗 http://www.securityfocus.com/bid/91738

🔗 http://www.securitytracker.com/id/1036294

🔗 https://0ang3el.blogspot.ru/2016/07/beware-of-ws-xmlrpc-library-in-your.html

🔗 https://access.redhat.com/errata/RHSA-2018:1779

Vulnerability Description

Affected Platforms (CPE)

Ws Xmlrpc

References & Advisories

関連する脆弱性情報