Xfire

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-5817 Nov 04, 22:55 Maven HIGH POC This Week

Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN). Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

RCE Java Xfire Ec2 Api Tools Java Library Amazon

NVD

CVSS 3.1

7.4

EPSS

0.1%

CVE-2012-5817 Maven

EPSS 0% CVSS 7.4

HIGH POC This Week

Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN). Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

RCE Java Xfire +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy