CVE-2016-9585 describes a deserialization of untrusted data vulnerability in Red Hat JBoss EAP version 5's JMX endpoint. An attacker could exploit this flaw by providing specially crafted credentials, leading to a denial of service. With a CVSS score of 5.3 (Medium), this vulnerability requires no privileges and has a high impact on availability, but its attack complexity is high and user interaction is required. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.0.0CPE matchmatch criteria | cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.