CVE-2017-9363

CRITICAL 9.8CVE-2017-9363 · Published 02/06/2017 · updated 17/06/2026

In short

CVE-2017-9363 is a CRITICAL (CVSS 9.8) vulnerability affecting iam (soffid).
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
iam soffid	`≤ 1.7.4`	No fix yet

Description

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.

References

soffid.com/security-advisory1-update · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free