← Back to CVE List

CVE-2016-0779

Published: 2017-04-11T16:59Z
Last Modified: 2024-11-21T02:42Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt