CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.3. It affects Apache, Java. Its EPSS score suggests a 30.0% probability of exploitation in the next 30 days.
CVE
CVE-2019-10086
Severity
HIGH
CVSS
7.3
EPSS
29.95%
Apache Java
Original NVD Description
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Related CVEs
Other vulnerabilities affecting the same vendor(s)