CVE-2023-4528CWE-502

JSCAPE MFT Server Unsafe Deserialization on Management Port

High · published September 7, 2023

CVSS v3.1

7.2

EPSS

32%

Percentile

98.3

In the wild

Unconfirmed

What it is

Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

The record

Technical detail

CVSS v3.1: 7.2 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.31860 · 98.3th percentile
Weakness: CWE-502 · Deserialization of Untrusted Data
Published: 2023-09-07T17:39Z

EPSS history

Timeline

07 SEP 17:39Z
JSCAPE MFT Server Unsafe Deserialization on Management Port
cvelistv5