Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-3690

No fix known EPSS 5%

The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload.

Published 2017-06-08 · CVE record · OSV