CVE-2021-20318
CVE-2021-20318
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Dec 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage.
Affected products
n/a · Artemis in EAP 7Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →