Critical severity9.8NVD Advisory· Published May 20, 2020· Updated Jun 17, 2026
CVE-2020-12835
CVE-2020-12835
Description
An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into the communication, resulting in remote code execution in the context of a client-side Network Licensing Protocol component.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- SmartBear/ReadyAPI SoapUI Prodescription
- Range: =3.2.5
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/157772/Protection-Licensing-Toolkit-ReadyAPI-3.2.5-Code-Execution-Deserialization.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2020/May/38nvdExploitMailing ListThird Party Advisory
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-039.txtnvdExploitThird Party Advisory
- www.syss.de/pentest-blog/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.