Sofarpc

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-23636 Jan 23, 18:15 Maven CRITICAL PATCH Act Now

SOFARPC is a Java RPC framework. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Apache Java Deserialization Sofarpc

NVD GitHub

CVSS 3.1

9.8

EPSS

0.8%

CVE-2023-41331 Sep 12, 20:15 CRITICAL Act Now

SOFARPC is a Java RPC framework. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java Deserialization Sofarpc

NVD GitHub

CVSS 3.1

9.8

EPSS

1.3%

CVE-2024-23636 Maven

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Apache Java Deserialization +1

NVD GitHub

CVE-2023-41331

EPSS 1% CVSS 9.8

CRITICAL Act Now

SOFARPC is a Java RPC framework. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java Deserialization Sofarpc

NVD GitHub