Exadel Flamingo
2 CVEs affecting Exadel Flamingo. Latest disclosed: 2018-06-11. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-3206 | Critical | 9.8 | 2018-06-11 | The Java implementation of AMF3 deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML docum… |
CVE-2017-3202 | Critical | 9.8 | 2018-06-11 | The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes via their… |