Skip to content
OpenAdvisories

Package · Maven

org.apache.xmlrpc:xmlrpc

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-17570 Public exploit EPSS 49%

    Insecure Deserialization in Apache XML-RPC

    An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-R…

    Apache Apache XML-RPC org.apache.xmlrpc:xmlrpc libxmlrpc3-java Ubuntu Maven
  • Critical 9.8
    CVE-2016-5003 EPSS 15%

    Apache XML-RPC vulnerable to Deserialization of Untrusted Data

    The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.

    org.apache.xmlrpc:xmlrpc Maven