CVE-2022-29805

CRITICAL 9.8CVE-2022-29805 · Published 19/08/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
fishbowl fishbowlinventory	`< 2022.4.1`	`2022.4.1`

Description

A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a crafted XML payload.

References

fishbowlinventory.com · Product
whiteoaksecurity.com/blog/fishbowl-disclosure-cve-2022-29805 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free