← All advisories

Critical severity9.8NVD Advisory· Published Jun 8, 2017· Updated Jun 17, 2026

CVE-2016-3690

CVE-2016-3690

Description

The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary code via a crafted serialized payload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8

Red Hat/Jboss Enterprise Application Platform7 versions
cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:*
JBoss/PooledInvokerServletllm-create
Range: 4.x and 5.x

Patches

Vulnerability mechanics

References

4

www.securityfocus.com/bid/99079nvdThird Party AdvisoryVDB Entry
access.redhat.com/solutions/178393nvdMitigationVendor Advisory
access.redhat.com/solutions/45530nvdMitigationVendor Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.