VDB

BDU%3A2022-06488

BDU%3A2022-06488 PUBLISHED CVSS 7.099999904632568 HIGH

Уязвимость Java-библиотеки для преобразования объектов в XML или JSON формат XStream платформы виртуализации VMware Cloud Foundation, позволяющая нарушителю выполнить произвольный код с root-привилегиями

Risk Scores

CVSS 2.0
7.099999904632568

Affected Products

VendorProductVersions
Red Hat Inc., Сообщество свободного программного обеспечения, Oracle Corp., Fedora Project, Xstream Project, VMware Inc.Red Hat Enterprise Linux, Jboss Fuse, Debian GNU/Linux, JBoss A-MQ, Red Hat BPM Suite, Communications BRM - Elastic Charging Engine, Data Grid, Red Hat Process Automation, Fedora, Red Hat Integration Camel K, Red Hat Integration Camel Quarkus, Oracle Business Activity Monitoring, Oracle Retail Xstore Point of Service, Red Hat CodeReady Studio, Oracle WebCenter Portal, XStream, Communications Cloud Native Core Automated Test Suite, Communications Cloud Native Core Policy, VMware Cloud Foundation, Decision Manager, Commerce Guided Search, Communications Cloud Native Core Binding Support Function

Timeline

  • Oct 26, 2022 CVE Published
  • Sep 24, 2024 CVE Updated
  • Mar 19, 2026 Distribution Patch

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›