CVE-2016-4000

—

CVSS 3.0

9.8 critical

EPSS

6%p93

Published

Jul 6, 2017 (Jul 6, 2017)

Modified

Jun 17, 2026

Description

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

Vendors: jython project debian
Products: jython, debian linux
Weakness: CWE-502
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.2%)

In the news1 stories

Oracle critical patch advisory addresses 284 flaws, 33 critical

Security AffairsJan 18, 13:15 UTC · Jan 18, 2019Vulnerability CVE-2016-1000031 CVE-2017-5645 CVE-2018-11776+3 CVEs

60