Causeway

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-64408 Nov 19, 11:15 Maven MEDIUM PATCH This Month

Apache Causeway faces Java deserialization vulnerabilities that allow remote code execution (RCE) through user-controllable URL parameters. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Apache Java Deserialization Causeway

NVD

CVSS 3.1

6.3

EPSS

0.8%

CVE-2025-64408 Maven

EPSS 1% CVSS 6.3

MEDIUM PATCH This Month

Apache Causeway faces Java deserialization vulnerabilities that allow remote code execution (RCE) through user-controllable URL parameters. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Apache Java +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy