Jboss EAP Deserialization of Untrusted Data Vulnerability - CVE-2016-7065 - Vulnerability Database

Jboss EAP Deserialization of Untrusted Data Vulnerability - CVE-2016-7065

High

Reference: CVE-2016-7065

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-7065

Title: Jboss EAP Deserialization of Untrusted Data Vulnerability

Overview:

The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.