CVE-2021-20318CWE-502

The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978

published December 23, 2021

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01757 · 77.8th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2021-12-23T19:48Z
EPSS history
Timeline
  • 23 DEC 19:48Z
    The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978
    cvelistv5