JSCAPE MFT Server Unsafe Deserialization on Management Port
33Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.2epss 32%
exploitation probability
32%top 2% of all CVEs
observed exploitation
nono source reports it
Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Redwood Software · JSCAPE MFT Server