CVE-2016-8653 MEDIUM

CVE-2016-8653

Vendor Red Hat

Product Fuse

Weakness CWE-502 · Unsafe deserialization

Published August 1, 2018

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it. An attacker could use this flaw to launch a denial of service attack.

Key dates

02Disclosure timeline

August 1, 2018 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2016-8653 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/502.html

Related vulnerabilities

04Related CVE

CVE-2024-5649 Universal Slider <= 1.6.5 - Authenticated (Contributor+) PHP Object Injection CVE-2022-36006 Authenticated remote code execution due to insecure deserialization (GHSL-2022-063) CVE-2024-33641 WordPress Custom field finder plugin <= 0.3 - PHP Object Injection vulnerability CVE-2025-7696 Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.3 - Unauthenticated PHP Object Injection via verify_field_val Function CVE-2022-33947 BIG-IP DNS TMUI Vulnerability CVE-2022-33947