Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2017-3208
HistoryJun 11, 2018 - 5:29 p.m.

Design/Logic Flaw

2018-06-1117:29:00
PRIOn knowledge base
www.prio-n.com
4

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.5%

JSON

The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server, denial of service, or server side request forgery.

CPENameOperatorVersion
weborb_for_javaeq5.1.1.0

Related

cve 1
cvelist 1
nvd 1
seebug 1
myhack58 1
cert 1
cve
cve
CVE-2017-3208
2018-06-11 17:29:00
cvelist
cvelist
CVE-2017-3208
2018-06-11 17:00:00
nvd
nvd
CVE-2017-3208
2018-06-11 17:29:00
seebug
seebug
AMF3 Java implementations Improper Restriction of XML External Entity Reference ('XXE')
2017-04-06 00:00:00
myhack58
myhack58
Java AMF3 exposure remote code execution vulnerability-vulnerability warning-the black bar safety net
2017-04-07 00:00:00
cert
cert
Action Message Format (AMF3) Java implementations are vulnerable to insecure deserialization and XML external entities references
2017-04-04 00:00:00

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.5%

JSON
Related for PRION:CVE-2017-3208
cve1cvelist1nvd1seebug1myhack581cert1