High (7.2) in redwood jscape mft. EPSS 32% chance of exploitation in the next 30 days.
Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface
Severity
CVSS 3.1
7.2 high
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
32% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)