Description
The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload.
Unscored
CVE-2016-3690
EUVD-2016-4714GHSA-8phf-82cj-4m65
The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload.
Published Jun 8, 2017 · Updated Aug 6, 2024 · Assigned by redhat