What’s Vulnerable › Products
Exadel Flamingo amf-serializer vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Exadel Flamingo amf-serializer version is affected
Latest Exadel Flamingo amf-serializer vulnerabilities
- CVE-2017-3206 — The Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages (CVSS 9.8)
- CVE-2017-3202 — The implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes due to improper code control (CVSS 9.8)