CVE-2012-3347
Published · Updated
25Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 1.5%
from disclosure to weapon
Published on NVDJun 13
VulnCheck+1381d
exploitation probability
1.5%top 26% of all CVEs
observed exploitation
yesVulnCheck
AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828.
Affected products
n/a · n/a