Ws-xmlrpc (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2017-10-27. Vendor: Apache.

CVEs of Ws-xmlrpc

• CVE-2016-5003 - CVSS 9.8 (critical), 2017-10-27: The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java…
• CVE-2016-5004 - CVSS 6.5 (medium), 2017-06-06: The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service (resource…