Assuweb

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3160 Jan 28, 20:15 CRITICAL Act Now

Deserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA ASSUREX RENTES product allows a remote attacker to inject unsecure serialized Java object using a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Java Deserialization Assuweb

NVD

CVSS 3.1

9.8

EPSS

4.7%

CVE-2021-3160

EPSS 5% CVSS 9.8

CRITICAL Act Now

Deserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA ASSUREX RENTES product allows a remote attacker to inject unsecure serialized Java object using a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Java Deserialization +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy