CVE-2016-3690

Critical

Published: 08/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload.

An attacker could exploit this vulnerability to remotely execute code, potentially gaining control over the system.

It is recommended to upgrade to the latest version of JBoss EAP to mitigate this vulnerability.

Original NVD description (English source)

The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload.