← Database

CVE-2022-29805

CRITICAL CVSS: 9.8 Published: 2022-08-19 Modified: 2026-06-17

Description

A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a crafted XML payload.

Affected Platforms

Fishbowlinventory Fishbowl

Weakness Type

CWE-502

References