CVE-2020-23620

Katalog CVE

CVSS 9.8 · Critical EPSS 2,1%

Kerentanan Deserialization of Untrusted Data pada orlansoft erp. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The Java Remote Management Interface of all versions of Orlansoft ERP was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object.

Rincian

Terbit di NVD

2 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 81,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://orlansoft.com/ advisory vendor
• https://gist.github.com/fuzzKitty/95106430aa09760ebdcfa6304777f31f advisory pihak ketiga
• https://github.com/joaomatosf/jexboss advisory pihak ketiga