CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Java. Its EPSS score suggests a 29.3% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2017-7504
Severity
CRITICAL
CVSS
9.8
EPSS
29.32%
Java
Original NVD Description
HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Application Server <= Jboss 4.X does not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized data.
Related CVEs
Other vulnerabilities affecting the same vendor(s)