CVE-2020-12835

An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into the communication, resulting in remote code execution in the context of a client-side Network Licensing Protocol component.

Affected products

Java, Readyapi Soapui Pro

Smartbear Readyapi

= 3.2.5

CVSS 3.1

9.8 CRITICAL

EPSS

13.0% (96th percentile)

Weakness

CWE-502

NVD status

Modified

Published

2020-05-20