Sofarpc

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-23636 Maven CRITICAL PATCH Act Now

SOFARPC is a Java RPC framework. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Deserialization Apache Java Sofarpc

NVD GitHub

CVSS 3.1

9.8

EPSS

0.8%

CVE-2023-41331 CRITICAL Act Now

SOFARPC is a Java RPC framework. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java Deserialization Sofarpc

NVD GitHub

CVSS 3.1

9.8

EPSS

1.3%

CVE-2024-23636 Maven

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Deserialization Apache Java +1

NVD GitHub

CVE-2023-41331

EPSS 1% CVSS 9.8

CRITICAL Act Now

SOFARPC is a Java RPC framework. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java Deserialization Sofarpc

NVD GitHub