VYPR
Critical severity9.8NVD Advisory· Published Oct 27, 2017· Updated Jun 17, 2026

CVE-2016-5003

CVE-2016-5003

Description

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.xmlrpc:xmlrpcMaven
<= 3.1.3

Affected products

2

Patches

Vulnerability mechanics

References

24

News mentions

0

No linked articles in our index yet.