CVE-2016-0779

No fix known EPSS 10%

The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object.

Published 2017-04-11 · CVE record · OSV

Products: apache tomee