Fishbowl

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-29805 Aug 19, 13:15 CRITICAL POC THREAT Act Now

A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a crafted XML payload. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Java Deserialization Fishbowl

NVD

CVSS 3.1

9.8

EPSS

27.4%

CVE-2022-29805

EPSS 27% CVSS 9.8

CRITICAL POC THREAT Act Now

A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a crafted XML payload. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Java Deserialization +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy