Vulnerabilities > Softwareag > Webmethods > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-09-06 CVE-2023-0925 Deserialization of Untrusted Data vulnerability in Softwareag Webmethods 10.11
Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry (listening on TCP port 2099 by default) and two RMI interfaces (listening on a single, dynamically assigned TCP high port). Port 2099 serves as a Java Remote Method Invocation (RMI) registry which allows for remotely loading and processing data via RMI interfaces.
network
low complexity
softwareag CWE-502
critical
9.8