Vulnerabilities > Themidnightcoders > Weborb FOR Java
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-06-11 | CVE-2017-3208 | XXE vulnerability in Themidnightcoders Weborb for Java 5.1.1.0 The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. | 7.5 |
| 2018-06-11 | CVE-2017-3207 | Deserialization of Untrusted Data vulnerability in Themidnightcoders Weborb for Java 5.1.1.0 The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. | 7.5 |