CVE-2016-5062

—

CVSS 3.0

9.8 critical

EPSS

4%p90

Published

Sep 29, 2016 (Sep 29, 2016)

Modified

Jun 17, 2026

Description

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

Vendors: aternity
Products: aternity
Weakness: CWE-669
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news0 stories

No ingested article mentions this CVE yet.