Exadel records

3 published records for vendor exadel.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2017-3202No exploit	The implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classexadel · flamingo · CWE-913 pre-auth RCE Deserialization	Critical9.8	—	8.2%	Jun 11, 2018
40Plan	CVE-2017-3206No exploit	The Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documexadel · flamingo · CWE-611 Pre-auth Deserialization XXE	Critical9.8	—	3.7%	Jun 11, 2018
34Monitor	CVE-2017-3201No exploit	Flamingo amf-serializer by Exadel, version 2.2.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserializationexadel · flamingo amf-serializer · CWE-502 pre-auth RCE Deserialization	High8.1	—	5.4%	Jun 11, 2018

CVE-2017-3202
41Plan
The implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary class
CriticalCVSS 9.8No exploitEPSS 8%
- pre-auth RCE
- Deserialization
exadel · flamingoJun 11, 2018
CVE-2017-3206
40Plan
The Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML docum
CriticalCVSS 9.8No exploitEPSS 4%
exadel · flamingoJun 11, 2018
CVE-2017-3201
34Monitor
Flamingo amf-serializer by Exadel, version 2.2.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization
HighCVSS 8.1No exploitEPSS 5%
- pre-auth RCE
- Deserialization
exadel · flamingo amf-serializerJun 11, 2018