VDB
CVE-2021-20318
CVE-2021-20318
PUBLISHED
CVSS 7.199999809265137 HIGH
The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage.
EPSS 1.70% · 76.3th percentile
Risk Scores
CVSS 3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.70%
76.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Artemis in EAP 7 | 7.3.9.GA, 7.4.0.GA |
| redhat | jboss_enterprise_application_platform | 7.4.0, 7.3.9 |
Timeline
- Dec 23, 2021 CVE Published
- Dec 24, 2021 EPSS Score
- Feb 16, 2022 EPSS Score
- Apr 12, 2022 EPSS Score
- Jun 5, 2022 EPSS Score
- Sep 23, 2022 EPSS Score
- Nov 17, 2022 EPSS Score
- Jan 10, 2023 EPSS Score
- Mar 6, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 29, 2023 EPSS Score
- Jun 22, 2023 EPSS Score