Vulnerabilities > Adobe > Livecycle ES4

DATE CVE VULNERABILITY TITLE RISK
2023-04-06 CVE-2023-28500 Deserialization of Untrusted Data vulnerability in Adobe Livecycle ES4
A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gain operating system code execution by submitting specially crafted Java serialized objects to a specific URL.
network
low complexity
adobe CWE-502
critical
 9.8
9.8