CVE-2017-10992

2020-03-1012:51:50

mitre

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.006

Percentile

79.0%

JSON

In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request to invoker/JMXInvokerServlet, aka PSRT110461.

References

labs.integrity.pt/advisories/cve-2017-10992/