CVE-2017-9363

9.8 criticalEPSS 3.3%

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2017-06-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

soffid:iam

References

http://www.soffid.com/security-advisory1-update/
http://www.soffid.com/security-advisory1-update/

Check your stack JSON