CVE-2016-3737

Critical

Published: 02/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The server in Red Hat JBoss Operations Network (JON) before version 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially leading to system compromise and data leakage.

Recommendation

It is recommended to upgrade to version 3.3.6 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.