VULNERABILITY INTELLIGENCE

CVE-2021-22855

CVSS score9.8 CRITICAL
EPSS probability2.04%
CISA KEVNot currently listed
Published2021-02-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands.

Weakness classification

  • twcert@cert.org.tw: CWE-502
  • nvd@nist.gov: CWE-502

Primary references