CVE-2023-4528highCWE-502

CVE-2023-4528: high-severity vulnerability in Redwood Software JSCAPE MFT Server

JSCAPE MFT Server Unsafe Deserialization on Management Port

Published 07 Sep 2023 · Updated 23 Apr 2025

Follow this CVE + Monitor JSCAPE MFT Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 32%

Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Redwood Software · JSCAPE MFT Server

References

https://www.jscape.com/blog/binary-management-service-patch-cve-2023-4528 https://www.rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed/