CVE-2023-38264

ALTO 7.5CVE-2023-38264 · Published 14/05/2024 · updated 17/06/2026

In breve

CVE-2023-38264 è una vulnerabilità ALTO (CVSS 7.5) che riguarda java software development kit (ibm).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.85%, superiore al 58.3% delle vulnerabilità.
Correzione: aggiornare a 7.1.5.22, 8.0.8.25 o successiva.

Package	Affected versions	Patched versions
java software development kit ibm	`≥ 7.1.0.0, < 7.1.5.22≥ 8.0.0.0, < 8.0.8.25`	`7.1.5.228.0.8.25`

Description

The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.

References

exchange.xforce.ibmcloud.com/vulnerabilities/260578 · Vendor Advisory
ibm.com/support/pages/node/7150727 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free