← Back

Oscore

oscore

Vendor: Oscore • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Oscore
1Oscore
Jun 17, 2026
Jul 28, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
oscore v2.2.6 and below was discovered to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability is exploited via passing an unchecked argument.