CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Java. It may be remotely exploitable.
CVE
CVE-2023-28462
Severity
CRITICAL
CVSS
9.8
EPSS
0.93%
Java
Original NVD Description
A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 and newer (Community), when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)