CVE-2023-38264

Summary

CVE-2023-38264: IBM SDK's Java Technology Edition Object Request Broker (ORB) versions 7.1.0.0 to 7.1.5.21 and 8.0.0.0 to 8.0.8.21 suffer from a denial-of-service vulnerability. Maliciously crafted serialized objects can bypass improperly enforced deserialization filters, JEP 290 MaxRef and MaxDepth, leading to resource exhaustion and service disruption. IBM X-Force identifies this issue as 260578.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.