VULNERABILITY INTELLIGENCE

CVE-2023-4528

CVSS score7.2 HIGH
EPSS probability31.86%
CISA KEVNot currently listed
Published2023-09-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

Weakness classification

  • cve@rapid7.com: CWE-502
  • nvd@nist.gov: CWE-502

Primary references