Themidnightcoders Weborb For Java
2 CVEs affecting Themidnightcoders Weborb For Java. Latest disclosed: 2018-06-11. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-3208 | Critical | 9.8 | 2018-06-11 | The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML do… |
CVE-2017-3207 | Critical | 9.8 | 2018-06-11 | The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rathe… |