High severity7.2NVD Advisory· Published Sep 7, 2023· Updated Jun 17, 2026

CVE-2023-4528

Description

Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jscape/Binary Management Servicellm-create
Range: <2023.1.9
Jscape/MFT Serverllm-fuzzy
Range: <2023.1.9
Redwood Software/JSCAPE MFT Serverv5
Range: 0

Patches

Vulnerability mechanics

References

www.jscape.com/blog/binary-management-service-patch-cve-2023-4528nvdVendor Advisory
www.rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed/nvdMitigationThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.022
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000