CyberSecBulletin

Softwareag vulnerabilities

We track 2 vulnerabilities in Softwareag products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 6, 2023.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Softwareag vulnerabilities

  • 9.8 Critical severity

    webMethods OneData: Deserialization of Untrusted Data

    CVE-2023-0925Software

    Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry (listening on TCP port 2099 by default) and two RMI interfaces (listening on a single, dynamically assigned TCP high port). Port 2099 serves

  • 9.8 Critical severity

    Quartz: Improper Control of Generation of Code

    CVE-2023-39017SoftwareagEPSS 1.19%

    quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component org.quartz.jobs.ee.jms.SendQueueMessageJob.execute. This vulnerability is exploited via passing an unchecked argument. NOTE: this is disputed by multiple part